
Research
Malicious fezbox npm Package Steals Browser Passwords from Cookies via Innovative QR Code Steganographic Technique
A malicious package uses a QR code as steganography in an innovative technique.
simple-spotify
Advanced tools
Pure Python wrapper library for Spotify Web API.
pip install simple-spotify
from simple_spotify.api import Spotify
from simple_spotify.authorization import ClientCredentialsFlow
res = ClientCredentialsFlow.token_request(
'YOUR CLIENT ID',
'YOUR CLIENT SECRET'
)
auth = ClientCredentialsFlow(**res)
sp = Spotify(auth)
result = sp.search(q='sora tob sakana')
for album in result.albums.items:
print(album.name)
sora tob sakana
cocoon ep
yozora wo zenbu
mahou no kotoba
If you execute endpoint which need AutotizationCodeFlow on your local envirnoment tempolary,
authcode-fetch
will be help you.
$ authcode-fetch
=============================================
Simple-Spotify
Authorization Code Flow Support Tool
=============================================
Fetch authorization code from https://accounts.spotify.com/authorize.
Output json file named simple-spotify_code.json.
This json file includes client_id, client_secret, authorization code, redirect uri.
Format of json file as follows.
{
'client_id': client_id,
'client_secret': client_secret,
'code': authorization code,
'redirect_uri': redirect_uri
}
Enter the your Client ID : YOUR CLIENT ID
Enter the your Client Secret : YOUR CLIENT SECRET
Enter the redirect URI :http://127.0.0.1:8080/
Enter the scopes
Scope :user-read-birthdate
Add more scope ?(y/n) :n
# Open your default browser. Log in, authorize access
Enter the redirected URL : REDIRECTED URL
Then, simple-spotify_code.json generate on your current directory.
import json
from simple_spotify.api import Spotify
from simple_spotify.authorization import AuthorizationCodeFlow
with open('simple-spotify_code.json') as f:
auth_dict = json.load(f)
res = AuthorizationCodeFlow.token_request(**auth_dict)
auth = AuthorizationCodeFlow(**res)
sp = Spotify(auth)
current_user = sp.get_current_user_profile()
v.0.1.0 (May 09, 2019): Initial release:
v.0.1.1 (May 10, 2019): Create sample web app, fix authorization.py
v.0.1.2 (May 10, 2019): Upload to PyPI
v.0.1.3 (May 11, 2019): Bugfix on simple_spotify.api
v.0.1.4 (May 17, 2019): Added keyword argument market
to following methods. get_album
, get_albums
, get_track
, get_tracks
FAQs
Pure Python Spotify Web API wrapper library
We found that simple-spotify demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
A malicious package uses a QR code as steganography in an innovative technique.
Research
/Security News
Socket identified 80 fake candidates targeting engineering roles, including suspected North Korean operators, exposing the new reality of hiring as a security function.
Application Security
/Research
/Security News
Socket detected multiple compromised CrowdStrike npm packages, continuing the "Shai-Hulud" supply chain attack that has now impacted nearly 500 packages.