Unable to authorise the app

[codex70]

This used to work, but I got the 410 error, so tried to authorise the app with Sonos again. This time whilst trying to authorise I get an error from the Sonos API saying there was a problem getting you connected with the error messages ERR_CLEARTEXT_NOT_PERMITTED

[zmullett]

Hi @codex70. Yes I started to receive reports of this about a week ago. Unfortunately I won't have the spare time to investigate this currently.

Nothing has changed in the widget's code; the OAuth request originates at:

connectiq-sonos/source/SonosInterface.mc

Lines 81 to 96 in 6338fc9

	function makeOAuthRequest() {
	var clientId = Application.loadResource(Rez.Strings.SonosIntegrationKey);
	Communications.makeOAuthRequest(
	AUTH_URL,
	{
	"scope" => "playback-control-all",
	"redirect_uri" => "https://localhost",
	"response_type" => "code",
	"client_id" => clientId,
	"state" => "unused",
	},
	"https://localhost",
	Communications.OAUTH_RESULT_TYPE_URL,
	{"code"=> "code", "error" => "error"}
	);
	}

Presumably either the Sonos auth server is either now (thankfully) stricter on safety and is rejecting plaintext requests, or something has degraded in the Garmin flow and they're sending these requests in plaintext.

[Wolfgang20244]

Hi Zullett,
first of all: THANKS that you created this great app, which is a pleasure to use!

The link which is shown in the background, when the error appears is this one (with http...not https):

"
The website under
http://api.sonos.com/login/v3/oauth/selectHousehold?scope=playback-control-all&response_type=code&redirect_uri=https%3A%2F%2Flocalhost&state= etc....
couldnt be loaded because
net: ERR_CLEARTEXT_NOT_PERMITTED
"

Might this be the reason?

I (and probably hundreds of other users) will be very happy to use this app also in future :)...so if you can find the error as soon as you find time, this would be great! By the way: Such a great little efficiant tool doesnt needs to be for free...so in case you start a donation round, I will definitely contribute :)

[zmullett]

Thanks for the praise, @Wolfgang20244. It's great to know folk out there have been benefiting from it! Regarding donations, if I do end up figuring out what's going on here, you can buy me a coffee via https://ko-fi.com/zmullett 😊

Thank you for posting the debugging detail, but herein lies the mystery; nowhere in the widget's code do I make an insecure (i.e. non-HTTPS) request. Curiously also, the /selectHousehold endpoint is not referenced in the code either. So I'm currently at a loss as to why, during the oauth handshake, why a plaintext request to that endpoint is even made.

[zmullett]

For posterity, found a similar symptom for a different app: https://forums.garmin.com/apps-software/mobile-apps-web/f/garmin-connect-web/268887/app-garmin-smart-phone-link---foursquare-cleartext-error

[Wolfgang20244]

Hi all, I tried it again. With the garmin venu 2plus it works again! :))
Did you adapt something @zmullett or was it a correction done somehow by Garmin?

[zmullett]

I'm glad to hear it @Wolfgang20244 😊
The problem appeared and has ostensibly disappeared all without my involvement. I presume the root cause lies somewhere between Garmin and Sonos. For any future readers, please ensure that your Garmin software (both on device and the phone apps) is up to date.