Can no longer login to Qobuz

[geofstro]

Hi,
Since yesterday the plug-in is no longer accepting my credentials to login.

I even set up a new temporary account with Qobuz and tried those credentials.

Still doesn’t work.

I wonder if this is happening for all users of this Qobuz plug-in
Thanks

Geofstro

[guentir]

Same here!
Also tried the dev version with no success..

[tidalf]

I'm afraid we are no more allowed to use their API (our key seems revoked, the API has changed and the API documentation has been removed from their public repository).
I'll update here if I have answer from them.

[wawa79]

I sent them a complaint requesting them to refund my subscription. In one hand they state Qobuz is compatible with Kodi on their Web site, and on the other hand, they remove access to their API. Hope this make them react...

[Laurent94jbl1]

Bonjour, j'ai évidement le même problème. Je pense que nous devons être beaucoup dans ce cas !!! Je pense que beaucoup d' abonnements grâce a votre addon, ont dus être engrangés. Ils ont fait la même pour l'api Qobuz de volumio, ou du jour au lendemain : - https://forum.volumio.org/qobuz-temporarily-not-working-from-t12936.html
" They decided to revoke the API key and issue a new one, in order to allow only updated Volumio clients to access their service."
J'espère que ce n'est que ça. Bon courage à vous et merci la Team

[dahumph]

Same here. They are still listing Kodi on their hompage to be compatible software. Asked them for refund. Let's see what will happen...

[dahumph]

Short update, they (Qobuz) stated that there's presently a risk of hacker attacks and therefor they decided to ban the Kodi qobuz plugin for now. They also stated that they are in talks with Kodi to fix the issue.

[guentir]

From Qobuz:

Good day

Thank you for your message.

For security reasons, access to Qobuz via Kodi has been blocked for the time being.
There is currently a danger of hacker attacks.
We are currently in talks with Kodi to solve the problem as quickly as possible.
We recommend bubbleupnp, Mconnect or Audirvana as alternatives.

[Laurent94jbl1]

they deleted the kodi compatible app on their site ...

[florent-zambon]

On my side, answer from qobuz : "Nous vous invitons à utiliser des systèmes de streaming plus officiels." Translation : We invite you to use more "official" streaming systems. In other words, they are not able to provide a solid, protected API that would be consumed in any environment. Thinking about canceling my subscription.

[wawa79]

We should not cancel our subscription but force them to provide am API secure enough for Kodi as they did state that they were compatible... Le mer. 9 oct. 2019 à 12:16, Florent <[email protected]> a écrit :

…

On my side, answer from qobuz : "Nous vous invitons à utiliser des systèmes de streaming plus officiels." Translation : We invite you to use more "official" streaming systems. In other words, they are not able to provide a solid, protected API that would be consumed in any environment. Thinking about canceling my subscription. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#247?email_source=notifications&email_token=AE6LTHT5GS2FIH6HZEZ5LRDQNWVQHA5CNFSM4I5FSWOKYY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEAXMTWQ#issuecomment-539937242>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AE6LTHVNKVP3XUT4NYL5E7TQNWVQHANCNFSM4I5FSWOA> .

[3th0]

my answer from support :

Unfortunately, we do not guarantee the ecosystem of our partners but only our apps. We had to close KODI/XBMC due to legal and piracy constraints. Alternatives exist at the end of this page: https://help.qobuz.com/hc/fr/articles/360028821471-Mon-mat%C3%A9riel-Hi-Fi-n-est-pas-int%C3%A9gr%C3%A9-ou-compatible-avec-Qobuz-

I think they identified the bug where we could stream directly (ie. mplayer.) on urls 's like :
https://streaming2.qobuz.com/file?uid=XXXXXX&eid=XXXXXXXXX&fmt=X&profile=raw&app_id=XXXXX&cid=XXXX&etsp=XX&hmac=XXX

Now I can download a data file but it doesn't look valid, it seems to be a partial file or something like that.

file qobuz
qobuz: data

mediainfo qobuz
General
Complete name: qobuz
File size: 6.23 MiB

The communication of qobuz seems strange, they remove on the site the fact that qobuz works on kodi/osmc but they still seems to want to work to solve this incident.

@tidalf Are you in contact with them as the volumio developers were? Do they really care about alternatives platforms usage ?

[tidalf]

I'm waiting for an answer :) And yes usually they care.

[schaefferp]

Any news about this issue ?

[NicolasBrosse]

I have the same issue, contacted the Qobuz customer service and they just replied the same thing as mentioned above :

[...] we do not guarantee the ecosystem of our partners but only our apps [...]

I was just inquiring if there were exchanges going on with qobuz/kodi addon team. No answer to that.

[florent-zambon]

Quobuz said to me it was up to the developers of the opensource integration to take care of the API keys and refrain from getting it stolen and not to them to provide some other API architecture. So for me it does mean a simple thing : deadlock.

[mobidyc]

It means we have to find a way to use the Qobuz API keys, in an open source project, without exposing it to the public.

1. the key has be be encrypted for the project.
2. the decyphering should not be possible in another project.

The only safe way I see could be to store the Qobuz API key online, and allow the Qobuz plugin to retrieve it (It has to remain secure in memory unitl plugin restart).

We still need some magic to authenticate the Qobuz plugin to the online store but I'm sure it is doable.
could be a questions&answers game for the authentication:

• plugin ask authentication (with current version in use)
• online service asks X questions based on that version (hash of random functions, size of an internal library, any relevant check)
• plugin has to provide a quick answer or will be banned after X fails for a certain period.

That would also permits to:

1. use a new Qobuz API key when needed, without the need to update the plugin.
2. force plugin update if a security hole is found

[X-dark]

Any news on this? I was wondering if we could switch to user provided API key but I cannot even find anymore Qobuz API documentation.

[Diaduma]

Hi !

here is Qobuz's answer that I received last week :
"We had to close KODI / XBMC for legal and hacking constraints".

We must therefore forget the current add-on and hope that Qobuz develops its own add-on for Kodi

[popindavibe]

Got the same response. That's too bad, off I go.

[mvmsoft]

Imho best is to disable your Qobuz account and tell them why: that you love to have a working Qobuz add-on and that you hope that Qobuz will provide one for Kodi in the near feature.

[davidblumntcgeo]

As a workaround, I found that BubbleUPnP can still be used to stream Qobuz to an OpenHome renderer and to create said OpenHome renderer on top of a DNLA client. I’m running a Kodi DNLA music server and a BubbleUPnP server on my Mac, and its easy to use an OpenHome control point like Linn Kazoo to switch between playing a Qobuz stream and playing my own music from Kodi on any of my renderers (Volumio, MoOde, Denon HEOS).

I realize this work around gives no satisfaction to all of the hardworking folks who developed the Qobuz add-on for Kodi. But it’s an option for anyone who wants to stream Qobuz to a DNLA renderer, as once was possible using only Kodi, without resorting to a paid proprietary device or service (e.g. Roon).

Details for configuring BubbleUPnP to stream Qobuz are available from https://www.hifizine.com/2019/07/stream-qobuz-to-anything/