From 3bfe34b1e96a676991ded79c9129e8d810bf2786 Mon Sep 17 00:00:00 2001 From: David Bishop Date: Thu, 26 Feb 2026 00:04:03 -0800 Subject: [PATCH] Fix Qobuz provider using HTTP instead of HTTPS for all API calls (#3246) - Switch both _get_data and _post_data URLs from http:// to https:// - Remove ssl=False on POST requests that was disabling TLS verification Co-authored-by: David Bishop Co-authored-by: Claude Opus 4.6 --- music_assistant/providers/qobuz/__init__.py | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/music_assistant/providers/qobuz/__init__.py b/music_assistant/providers/qobuz/__init__.py index a1c8e6f6..e065cb1d 100644 --- a/music_assistant/providers/qobuz/__init__.py +++ b/music_assistant/providers/qobuz/__init__.py @@ -823,7 +823,7 @@ class QobuzProvider(MusicProvider): ) -> dict[str, Any] | None: """Get data from api.""" self.logger.debug("Handling GET request to %s", endpoint) - url = f"http://www.qobuz.com/api.json/0.2/{endpoint}" + url = f"https://www.qobuz.com/api.json/0.2/{endpoint}" headers = {"X-App-Id": app_var(0)} locale = self.mass.metadata.locale.replace("_", "-") language = locale.split("-")[0] @@ -881,16 +881,14 @@ class QobuzProvider(MusicProvider): params = {} if not data: data = {} - url = f"http://www.qobuz.com/api.json/0.2/{endpoint}" + url = f"https://www.qobuz.com/api.json/0.2/{endpoint}" params["app_id"] = app_var(0) auth_token = await self._auth_token() if auth_token is None: msg = "Authentication token is required" raise LoginFailed(msg) params["user_auth_token"] = auth_token - async with self.mass.http_session.post( - url, params=params, json=data, ssl=False - ) as response: + async with self.mass.http_session.post(url, params=params, json=data) as response: # handle rate limiter if response.status == 429: backoff_time = int(response.headers.get("Retry-After", 0)) -- 2.34.1