Login failure when password contains dollar sign $

[dkathmann]

I just had the issue that I couldn't login with the plugin using my account but the account of my partner worked. We could narrow it down to the password length. My password that didn't work initially was quite long and a shorter one worked instantly.

[michaelherger]

How long was "quite long"? Could it be the password input field isn't long enough?

[dkathmann]

The password was 43 characters long. The input field doesn't seem to cut it. Also the http request seems to include the whole password.

[michaelherger]

Well, the maximum size of that input field is set to 40... it's a LMS default for these kinds of input fields.

[dkathmann]

As far as I know the size attribute just determines the width of the input field and doesn't restrict the password itself.

[michaelherger]

You're right, of course. Still odd.

What http request are you referring to? The auth call wouldn't use http, but some Spotify specific interaction. Could it have been a special character in your password?

[dkathmann]

Sorry, I meant the POST request to http://<MY_SERVER>:9000/plugins/Spotty/settings/authentication.html?playerid=<MY_PLAYER_ID>; the request payloads includes the password in plain text (I've only checked this superficially).

The only special characters in the password were $ and ! . The new one that worked doesn't have the $ in it anymore.

[michaelherger]

Could you check with another dollar sign in the shorter PW? Would that be the issue? What platform are you running LMS on? I have a vague memory of having dealt with a $ sign related issue before.

[dkathmann]

I just added one $ to the short password, removed the account from Spotty and tried to add it again which doesn't work. I also tried adding it with a longer password again (without the $) which works.

I'm running LMS in a Docker container on a Raspberry Pi 4 with Raspberry Pi OS.

[michaelherger]

Thanks for the confirmation!