ytm: Obtain credentials from web browser

Author: lubo

bin/sync-music-library

@@ -7,20 +7,6 @@
 
 set -eo pipefail
 
-__ytm_with_user_credentials() {
-	ytm "${YTM_OAUTH_CLIENT_ID}" <(pass "${YTM_CREDENTIALS_PASS_PATH}") "$@"
-}
-
-__ytm() {
-	if [ -z "${YTM_OAUTH_CLIENT_SECRET_PASS_PATH}" ]; then
-		__ytm_with_user_credentials "$@"
-		return
-	fi
-
-	pass "${YTM_OAUTH_CLIENT_SECRET_PASS_PATH}" |
-		__ytm_with_user_credentials "$@"
-}
-
 commit_changes() {
 	if git diff --quiet "${MUSIC_LIBRARY_DATABASE_PATH}"; then
 		echo "Library database is up-to-date."
@@ -36,28 +22,13 @@ commit_changes() {
 }
 
 main() {
-	if [ -z "${YTM_CREDENTIALS_PASS_PATH}" ]; then
-		echo "\$YTM_CREDENTIALS_PASS_PATH: Variable unset" >&2
-		exit 1
-	fi
-
-	if [ -z "${YTM_OAUTH_CLIENT_ID}" ]; then
-		echo "\$YTM_OAUTH_CLIENT_ID: Variable unset" >&2
-		exit 1
-	fi
-
-	if [ -z "${YTM_OAUTH_CLIENT_SECRET_PASS_PATH}" ]; then
-		echo "\$YTM_OAUTH_CLIENT_SECRET_PASS_PATH: Variable unset" >&2
-		exit 1
-	fi
-
 	if [ -f "${MUSIC_LIBRARY_DATABASE_PATH}" ]; then
 		echo "Exporting library…"
 
 		cd "$(dirname "${MUSIC_LIBRARY_DATABASE_PATH}")"
 
 		git checkout -fq master
-		__ytm export-library >"${MUSIC_LIBRARY_DATABASE_PATH}"
+		ytm export-library >"${MUSIC_LIBRARY_DATABASE_PATH}"
 		commit_changes
 
 		cd - >/dev/null
@@ -70,13 +41,13 @@ main() {
 	if [ -n "${MUSIC_LIBRARY_TARGET_PLAYLIST}" ]; then
 		echo "Syncing '${MUSIC_LIBRARY_TARGET_PLAYLIST}' with library…"
 
-		__ytm sync-playlist "${MUSIC_LIBRARY_TARGET_PLAYLIST}"
+		ytm sync-playlist "${MUSIC_LIBRARY_TARGET_PLAYLIST}"
 	else
 		echo "\$MUSIC_LIBRARY_TARGET_PLAYLIST: Variable unset" >&2
 	fi
 
-	echo "Downloading library…"
-	__ytm download-library
+	# echo "Downloading library…"
+	# ytm download-library
 }
 
 main "$@"

ytm/poetry.lock

@@ -8,6 +8,8 @@ description = ""
 authors = []
 
 [tool.poetry.dependencies]
+# TODO: Install from PyPI once no-binary dist. is available.
+playwright = {git = "https://github.com/microsoft/playwright-python.git", rev = "v1.58.0"}
 python = "^3.12"
 yt-dlp = ">=2025.1.26"  # https://github.com/ytdl-org/youtube-dl/issues/29494
 ytmusicapi = "^1.10.3"

ytm/pyproject.toml

@@ -3,18 +3,21 @@
 
 import argparse
 import csv
-from getpass import getpass
-import json
 import operator
 from pathlib import Path
+import shutil
 import sys
+from urllib.parse import urlsplit
 
+from playwright.sync_api import sync_playwright
 from yt_dlp import YoutubeDL
+import ytmusicapi
 from ytmusicapi import YTMusic
-from ytmusicapi.auth.oauth import OAuthCredentials
 
 GET_LIMIT = None
 
+PLATWRIGHT_TIMEOUT = 5 * 60 * 1000
+
 
 def get_song_entry(song):
     return {
@@ -154,15 +157,6 @@ def sync_playlist(client, playlist_id):
 
 def main():
     arg_parser = argparse.ArgumentParser()
-    arg_parser.add_argument(
-        "oauth_client_id",
-        help="OAuth Client ID",
-    )
-    arg_parser.add_argument(
-        "user_credentials",
-        help="File containing user OAuth credentials",
-        type=argparse.FileType(),
-    )
     subparsers = arg_parser.add_subparsers(dest="command", required=True)
     subparsers.add_parser(
         "download-library",
@@ -183,25 +177,46 @@ def main():
 
     args = arg_parser.parse_args()
 
-    with args.user_credentials:
-        user_credentials = json.loads(args.user_credentials.read())
-
-    try:
-        oauth_client_secret = (
-            getpass("OAuth Client Secret: ") if sys.stdin.isatty() else input()
+    with sync_playwright() as p:
+        browser = p.chromium.launch_persistent_context(
+            user_data_dir=(
+                Path.home() / ".config/ytm-google-chrome-authenticated"
+            ),
+            executable_path=shutil.which("google-chrome-stable"),
+            args=[
+                # Required for Google authentication.
+                "--disable-blink-features=AutomationControlled",
+            ],
+            # Required to prevent bot detection and to perform manual actions
+            # when necessary.
+            headless=False,
         )
-    except EOFError:
-        print(  # noqa: T201
-            "OAuth Client Secret could not be read.",
-            file=sys.stderr,
+        page = browser.new_page()
+
+        with page.expect_response(
+            lambda response: (
+                response.request.method == "POST"
+                and urlsplit(response.url)[:3]
+                == ("https", "music.youtube.com", "/youtubei/v1/browse")
+            ),
+            timeout=PLATWRIGHT_TIMEOUT,
+        ) as response_info:
+            page.goto(
+                "https://music.youtube.com/library",
+                timeout=PLATWRIGHT_TIMEOUT,
+            )
+
+        headers = "\n".join(
+            f"{header['name']}: {header['value']}"
+            for header in response_info.value.request.headers_array()
         )
-        return 1
+
+        page.close()
+        browser.close()
 
     client = YTMusic(
-        user_credentials,
-        oauth_credentials=OAuthCredentials(
-            args.oauth_client_id,
-            oauth_client_secret,
+        ytmusicapi.setup(
+            headers_raw=headers,
         ),
     )