Skip to content

v1.2.2 — Bye bye plain auth

Choose a tag to compare

View all tags
@vicrodh vicrodh released this 05 Apr 15:42
· 2701 commits to main since this release
v1.2.2
87194ca
This commit was signed with the committer’s verified signature.
vicrodh Victor RH
SSH Key Fingerprint: KX00HIRKzP6gfhKKk6TyEUA5B3ZTFhfWCVEFl7QaJIU
Verified
Learn about vigilant mode.

1.2.2 — Bye bye plain auth

About a month and a half ago, Qobuz began making changes to their authentication system. This was the reason we introduced OAuth login early on — and fortunately, doing so ahead of time meant no one was truly locked out of the app. This release simply removes direct credential login, making OAuth the sole authentication method. There is also some bugfixing for issues reported on GitHub.

We are considering requesting official API access again, and looking for ways to coordinate with the community to support this request to Qobuz — so that a more severe change in the future does not leave us out.

Version 1.2.2 was supposed to take a little longer to arrive, with initial support for BSD and headless mode, but this authentication issue has forced us to bring it forward; there aren't really many new features this time.

Thank you all for the continued support for QBZ.

Authentication

  • OAuth-only login — username/password authentication has been removed; OAuth via browser is now the sole login method
  • System browser login — new option to authenticate via your default browser (Firefox, Chrome, etc.) instead of the embedded WebView; supports password managers and saved sessions
  • Bootstrap no longer attempts basic auth — users with old saved credentials now see the login screen instead of hitting Qobuz's deprecated endpoint
  • Token login migrated to V2 crates — OAuth token handling moved to the V2 core architecture

Bug Fixes

  • "Go to Album" / "Go to Artist" broken after launch — navigation from the player bar now works without starting new playback first (#252)
  • MPRIS metadata missing on session restore — playback context and metadata now populate correctly on startup (#240)
  • Incorrect artist location in Artist Network — birth/formation location display fixed for MusicBrainz area hierarchy (#235)
  • Bulk "make available offline" not downloading — the action now actually triggers track downloads (#231)
  • F11 fullscreen and ESC exit — both now work globally across all views (#202)
  • Cached tracks playing at wrong quality — cache now validates sample rate and bit depth against the requested quality; stale fallback-quality files are re-downloaded transparently (#270)
  • JACK/qjackctl routing broken between tracks — new "Lock Output Device" option prevents QBZ from changing the system default sink on stream recreation (#263)
  • Scroll position lost on navigation — scroll state is now saved even without explicit scrolling
  • Virtualized container scroll restoration — fixed for all virtualized list and grid components

New Features

  • Playlists in favorites quick access — added to both the sidebar menu and the titlebar dropdown (#233)
  • Bulk make-offline action — select multiple tracks and download them all at once from the selection bar (#231)
  • Sleep inhibition — system sleep is now prevented during active playback via XDG portal (#229)
  • Log sanitization — sensitive IDs and UUIDs are now stripped from logs before upload (#213)
  • Streaming buffer indicator — progress bar in the seekbar shows how much of the track has been buffered (#194)
  • Lock Output Device — opt-in PipeWire setting for JACK/DAW users; skips pactl set-default-sink to preserve external routing (#263)

macOS Improvements

  • CoreAudio device probing — sample rate switching and device capability detection
  • Deep link support — qobuzapp:// URLs handled natively
  • Rich notifications — album artwork in desktop notifications via image_path
  • Platform-aware settings — Linux-only options hidden on macOS; menu bar terminology for tray settings
  • Cmd+, shortcut — opens settings (standard macOS convention)
  • Graphics CLI flags gated — --autoconfig-graphics, --reset-graphics, --reset-dmabuf are Linux-only
  • Released upstream deps — coreaudio-rs 0.14.1 and notify-rust 4.13.0 replace git forks
  • x86_64 cross-compilation — macOS builds now support Intel Macs

i18n

  • 20+ views and components — hardcoded strings replaced with translation keys
  • Date formatting fixes — corrected across ArtistDetailView, PurchasesView, BlacklistManagerView, and PurchaseAlbumDetailView
  • CD quality label — localized across all badge and quality displays
  • macOS-specific keys — menu bar terminology for all 5 locales

Other

  • Log upload migrated to paste.rs — dpaste.org now returns 403/405
  • Gentoo overlay — use libayatana-appindicator instead of libappindicator (#262)
  • Security — esbuild upgraded to 0.25.x (CVE in <= 0.24.2); CodeQL cleartext-logging alerts resolved
  • Dependency updates — vite 8, lofty 0.23, axum 0.8, rand 0.10, souvlaki 0.8.3, lucide-svelte 1.0

Thanks to @afonsojramos, @GwendalBeaumont, and @AdamArstall for their contributions to this release.

Full changelog: v1.2.1...v1.2.2

Contributors

afonsojramos, GwendalBeaumont, and AdamArstall
Assets 13
Loading
0 Join discussion