samoki.wtf

Spotidown

A high-performance Bun proxy server that uses headless browser automation to extract direct MP3 links from Spotify tracks and ISRC codes.

Year2025
CategoryAPI/CLI
FocusDigital Experience
Spotidown

The Core Concept

Spotidown Proxy is a high-performance REST API server built natively on Bun and TypeScript. It acts as an automated middleman to extract direct MP3 download links from spotidown.app. By simply providing a Spotify Track ID or an ISRC code, the server handles the complex scraping logic and redirects you straight to the audio file.


🏴‍☠️ The Automation Engine (Under The Hood)

This isn't a standard API wrapper; it's a full headless browser automation engine. Using Puppeteer, the server spins up a hidden browser session (--no-sandbox) and executes a series of precise DOM manipulations:

  • Automated reCAPTCHA Bypass: The script natively hooks into grecaptcha.ready, executes the site's public key (6LcXkaU...), and dynamically injects the token into the hidden g-recaptcha-response input.
  • Payload Extraction: It intercepts and extracts dynamic form validation fields (data, base, token) required to authorize the download request.
  • Session Keep-Alive: To ensure ultra-fast response times, the Puppeteer instance doesn't close. Instead, it runs a background setInterval worker that refreshes the target page every 5 minutes to prevent session timeout.

The Endpoints

The server exposes a minimal, brutalist routing system that handles the heavy lifting and returns a clean 302 Redirect directly to the rapid CDN download link.

RouteMethodAction
/track/:idGETResolves a direct Spotify Track ID (e.g., 1VdLG...) to an MP3 file.
/isrc/:isrcGETAuthenticates with spotify-web-api-node, queries the ISRC code to find the exact track, and triggers the download pipeline.

As officially stated in the project: This is strictly for educational purposes. We are simply sending automated HTTP requests and playing with headless browsers. If you use this routing logic to bypass copyright protections, that is entirely between you, the streaming monopolies, and your ISP. Code is speech; use it responsibly!