[Bug] Direct user to sign TOS when authentication is prevented because TOS has not been signed.

[RokeJulianLockhart]

Examples

1. The Point At Which It Fails

   

2. How It Fails

   

My Environment

1. The Application

   versionName=2.9.3
   versionCode=65

2. My OS

   [ro.build.version.release]: [15]
   [ro.build.display.id]: [FP5.VT2D.C.054.20250814]

[07jasjeet]

Hey @RokeJulianLockhart, looks like login is not responding in time from server. Could be due to connectivity or server timeout. Can you try again? Try a VPN if nothing helps and lmk here :)

[07jasjeet]

Hi, we have pinpointed the issue and resolved it. Version 2.9.4+ would fix this bug.

[RokeJulianLockhart]

#issuecomment-3392972362

I've no VPN enabled. With com.emanuelef.remote_capture, I see: ^{1 2}

IPProto,SrcIP,SrcPort,DstIp,DstPort,UID,App,PackageName,Proto,Status,Info,BytesSent,BytesRcvd,PktsSent,PktsRcvd,FirstSeen,LastSeen
6,10.215.173.1,48154,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,musicbrainz.org,7866,150137,80,77,2025-10-11T10:46:46.083+01:00,2025-10-11T10:47:20.705+01:00
17,10.215.173.1,58087,10.215.173.2,53,11046,ListenBrainz,org.listenbrainz.android,DNS,Closed,static.metabrainz.org,67,83,1,1,2025-10-11T10:46:46.365+01:00,2025-10-11T10:46:46.400+01:00
6,10.215.173.1,48160,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,static.metabrainz.org,9814,861053,157,205,2025-10-11T10:46:46.407+01:00,2025-10-11T10:47:17.039+01:00
6,10.215.173.1,48166,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,static.metabrainz.org,2255,5539,9,8,2025-10-11T10:46:46.412+01:00,2025-10-11T10:46:46.552+01:00
6,10.215.173.1,48172,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,static.metabrainz.org,2191,5539,9,8,2025-10-11T10:46:46.415+01:00,2025-10-11T10:46:46.553+01:00
6,10.215.173.1,48176,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,static.metabrainz.org,2295,5579,10,9,2025-10-11T10:46:46.418+01:00,2025-10-11T10:46:46.553+01:00
6,10.215.173.1,48184,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,static.metabrainz.org,2151,5499,8,7,2025-10-11T10:46:46.421+01:00,2025-10-11T10:46:46.557+01:00
6,10.215.173.1,48196,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,static.metabrainz.org,2247,5499,8,7,2025-10-11T10:46:46.424+01:00,2025-10-11T10:46:46.550+01:00
17,10.215.173.1,43436,142.250.140.95,443,11046,ListenBrainz,org.listenbrainz.android,QUIC,Closed,,5164,10078,13,16,2025-10-11T10:46:46.956+01:00,2025-10-11T10:46:47.087+01:00
6,10.215.173.1,41586,142.250.140.95,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,content-autofill.googleapis.com,2666,2800,9,8,2025-10-11T10:46:46.960+01:00,2025-10-11T10:47:50.815+01:00
17,10.215.173.1,61222,10.215.173.2,53,11046,ListenBrainz,org.listenbrainz.android,DNS,Closed,listenbrainz.org,62,78,1,1,2025-10-11T10:46:49.401+01:00,2025-10-11T10:46:49.425+01:00
6,10.215.173.1,48204,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,listenbrainz.org,14731,29980,114,104,2025-10-11T10:46:49.433+01:00,2025-10-11T10:47:22.966+01:00
17,10.215.173.1,42487,142.250.140.94,443,11046,ListenBrainz,org.listenbrainz.android,QUIC,Closed,,5600,91114,42,78,2025-10-11T10:46:49.836+01:00,2025-10-11T10:46:50.638+01:00
6,10.215.173.1,48208,142.132.240.1,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,musicbrainz.org,3728,1848,18,17,2025-10-11T10:46:50.021+01:00,2025-10-11T10:47:22.658+01:00
17,10.215.173.1,5454,10.215.173.2,53,11046,ListenBrainz,org.listenbrainz.android,DNS,Closed,musicbrainz.org,61,77,1,1,2025-10-11T10:46:52.556+01:00,2025-10-11T10:46:52.590+01:00
6,10.215.173.1,44866,18.165.242.5,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,w.soundcloud.com,3306,3789,12,10,2025-10-11T10:46:52.855+01:00,2025-10-11T10:47:56.001+01:00
6,10.215.173.1,42408,142.250.151.190,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,www.youtube.com,22776,757487,130,224,2025-10-11T10:46:52.862+01:00,2025-10-11T10:47:59.873+01:00
6,10.215.173.1,39392,142.251.30.119,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,i.ytimg.com,2618,2700,8,7,2025-10-11T10:46:53.184+01:00,2025-10-11T10:47:56.002+01:00
6,10.215.173.1,46762,142.251.30.155,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,googleads.g.doubleclick.net,3758,4131,17,17,2025-10-11T10:46:53.492+01:00,2025-10-11T10:47:56.002+01:00
17,10.215.173.1,45815,142.251.30.148,443,11046,ListenBrainz,org.listenbrainz.android,QUIC,Closed,,4755,9213,8,12,2025-10-11T10:46:53.505+01:00,2025-10-11T10:46:53.631+01:00
17,10.215.173.1,17583,10.215.173.2,53,11046,ListenBrainz,org.listenbrainz.android,DNS,Closed,api-widget.soundcloud.com,71,178,1,1,2025-10-11T10:46:58.837+01:00,2025-10-11T10:46:58.869+01:00
6,10.215.173.1,42402,18.245.218.38,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,api-widget.soundcloud.com,3523,2760,9,7,2025-10-11T10:46:58.875+01:00,2025-10-11T10:46:58.960+01:00
17,10.215.173.1,48567,10.215.173.2,53,11046,ListenBrainz,org.listenbrainz.android,DNS,Closed,o4508558300676097.ingest.de.sentry.io,83,99,1,1,2025-10-11T10:47:46.227+01:00,2025-10-11T10:47:46.407+01:00
6,10.215.173.1,43800,34.120.62.213,443,11046,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,o4508558300676097.ingest.de.sentry.io,3366,5022,14,12,2025-10-11T10:47:46.416+01:00,2025-10-11T10:47:46.537+01:00
17,10.215.173.1,34783,10.215.173.2,53,11046,ListenBrainz,org.listenbrainz.android,DNS,Closed,jnn-pa.googleapis.com,67,163,1,1,2025-10-11T10:47:46.915+01:00,2025-10-11T10:47:46.924+01:00
17,10.215.173.1,43436,142.250.140.95,443,11046,ListenBrainz,org.listenbrainz.android,QUIC,Closed,jnn-pa.googleapis.com,4475,51149,25,46,2025-10-11T10:47:46.932+01:00,2025-10-11T10:47:47.298+01:00

You can see so in user-attachments/files/22863281/PCAPdroid_11_Oct_10_46_39.pcap.zip. ³

#issuecomment-3393023547

@07jasjeet, shall you provide a CI artifact so that I am able to confirm? All I see is 2.9.3.apk.

Footnotes

1. android.stackexchange.com/posts/247052/timeline#comment_356763 ↩

2. security.stackexchange.com/revisions/77092/1 ↩

3. github-linguist/linguist/issues/7630 ↩

[07jasjeet]

@RokeJulianLockhart Refer release 2.9.5: https://github.com/metabrainz/listenbrainz-android/releases/tag/2.9.5

[RokeJulianLockhart]

@07jasjeet, that is no different in versionName=2.9.5:

screen-20251011-133601.mp4

Using com.emanuelef.remote_capture, I produced user-attachments/files/22864151/PCAPdroid_11_Oct_13_34_55.pcap.zip, which reports:

IPProto,SrcIP,SrcPort,DstIp,DstPort,UID,App,PackageName,Proto,Status,Info,BytesSent,BytesRcvd,PktsSent,PktsRcvd,FirstSeen,LastSeen
17,10.215.173.1,19041,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,musicbrainz.org,61,77,1,1,2025-10-11T13:34:58.568+01:00,2025-10-11T13:34:58.608+01:00
6,10.215.173.1,40808,142.132.240.1,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,musicbrainz.org,7893,143721,61,75,2025-10-11T13:34:58.613+01:00,2025-10-11T13:35:35.147+01:00
17,10.215.173.1,63377,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,listenbrainz.org,62,78,1,1,2025-10-11T13:35:01.585+01:00,2025-10-11T13:35:01.607+01:00
6,10.215.173.1,37676,142.132.240.1,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,listenbrainz.org,33339,458226,314,394,2025-10-11T13:35:01.612+01:00,2025-10-11T13:35:45.185+01:00
17,10.215.173.1,57584,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,fonts.gstatic.com,63,79,1,1,2025-10-11T13:35:02.025+01:00,2025-10-11T13:35:02.044+01:00
17,10.215.173.1,37355,142.250.117.94,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,fonts.gstatic.com,2889,4188,6,8,2025-10-11T13:35:02.051+01:00,2025-10-11T13:35:02.105+01:00
6,10.215.173.1,37688,142.132.240.1,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,musicbrainz.org,3780,2176,19,20,2025-10-11T13:35:02.109+01:00,2025-10-11T13:35:37.878+01:00
17,10.215.173.1,31814,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,o4508558300676097.ingest.de.sentry.io,83,99,1,1,2025-10-11T13:35:02.424+01:00,2025-10-11T13:35:02.457+01:00
17,10.215.173.1,40376,34.120.62.213,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,o4508558300676097.ingest.de.sentry.io,40642,4916,38,26,2025-10-11T13:35:02.464+01:00,2025-10-11T13:35:06.085+01:00
17,10.215.173.1,45853,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,w.soundcloud.com,62,169,1,1,2025-10-11T13:35:05.873+01:00,2025-10-11T13:35:05.895+01:00
17,10.215.173.1,12472,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,www.youtube.com,61,351,1,1,2025-10-11T13:35:05.874+01:00,2025-10-11T13:35:05.895+01:00
6,10.215.173.1,40522,18.165.242.50,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,w.soundcloud.com,3615,5818,17,15,2025-10-11T13:35:05.898+01:00,2025-10-11T13:35:14.205+01:00
17,10.215.173.1,43893,142.251.29.136,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,www.youtube.com,33000,799681,139,659,2025-10-11T13:35:05.901+01:00,2025-10-11T13:35:18.178+01:00
17,10.215.173.1,54824,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,api-widget.soundcloud.com,71,178,1,1,2025-10-11T13:35:06.004+01:00,2025-10-11T13:35:06.032+01:00
17,10.215.173.1,39915,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,sb.scorecardresearch.com,70,134,1,1,2025-10-11T13:35:06.006+01:00,2025-10-11T13:35:06.029+01:00
17,10.215.173.1,14191,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,api.soundcloud.com,64,171,1,1,2025-10-11T13:35:06.007+01:00,2025-10-11T13:35:06.041+01:00
17,10.215.173.1,31089,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,i2.sndcdn.com,59,166,1,1,2025-10-11T13:35:06.008+01:00,2025-10-11T13:35:06.030+01:00
17,10.215.173.1,23106,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,va.sndcdn.com,59,166,1,1,2025-10-11T13:35:06.009+01:00,2025-10-11T13:35:06.037+01:00
17,10.215.173.1,51701,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,i3.sndcdn.com,59,166,1,1,2025-10-11T13:35:06.010+01:00,2025-10-11T13:35:06.031+01:00
17,10.215.173.1,52187,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,i4.sndcdn.com,59,166,1,1,2025-10-11T13:35:06.011+01:00,2025-10-11T13:35:06.030+01:00
17,10.215.173.1,56424,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,i1.sndcdn.com,59,166,1,1,2025-10-11T13:35:06.012+01:00,2025-10-11T13:35:06.032+01:00
17,10.215.173.1,10325,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,wis.sndcdn.com,60,166,1,1,2025-10-11T13:35:06.013+01:00,2025-10-11T13:35:06.039+01:00
17,10.215.173.1,3555,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,style.sndcdn.com,62,169,1,1,2025-10-11T13:35:06.014+01:00,2025-10-11T13:35:06.038+01:00
17,10.215.173.1,29556,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,w1.sndcdn.com,59,165,1,1,2025-10-11T13:35:06.014+01:00,2025-10-11T13:35:06.040+01:00
17,10.215.173.1,9632,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,i.ytimg.com,57,153,1,1,2025-10-11T13:35:06.106+01:00,2025-10-11T13:35:06.129+01:00
6,10.215.173.1,43320,142.250.140.119,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,i.ytimg.com,2690,2700,9,7,2025-10-11T13:35:06.134+01:00,2025-10-11T13:35:06.221+01:00
17,10.215.173.1,50126,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,googleads.g.doubleclick.net,73,137,1,1,2025-10-11T13:35:06.390+01:00,2025-10-11T13:35:06.411+01:00
17,10.215.173.1,43529,142.250.117.157,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,googleads.g.doubleclick.net,4260,6320,18,23,2025-10-11T13:35:06.416+01:00,2025-10-11T13:35:15.311+01:00
6,10.215.173.1,44856,18.245.218.99,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,api-widget.soundcloud.com,3563,7537,13,12,2025-10-11T13:35:07.549+01:00,2025-10-11T13:35:07.709+01:00
17,10.215.173.1,1457,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,api.listenbrainz.org,66,96,1,1,2025-10-11T13:35:08.261+01:00,2025-10-11T13:35:08.280+01:00
6,10.215.173.1,37704,142.132.240.1,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,api.listenbrainz.org,6426,8635,29,29,2025-10-11T13:35:08.282+01:00,2025-10-11T13:35:44.477+01:00
17,10.215.173.1,24898,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,sdk.scdn.co,57,311,1,1,2025-10-11T13:35:14.189+01:00,2025-10-11T13:35:14.235+01:00
17,10.215.173.1,34544,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,api.spotify.com,61,110,1,1,2025-10-11T13:35:14.227+01:00,2025-10-11T13:35:14.247+01:00
6,10.215.173.1,38090,2.18.190.87,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,sdk.scdn.co,5369,203701,64,62,2025-10-11T13:35:14.237+01:00,2025-10-11T13:35:14.825+01:00
6,10.215.173.1,44626,35.186.224.24,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,api.spotify.com,3832,6072,18,18,2025-10-11T13:35:14.251+01:00,2025-10-11T13:35:14.976+01:00
17,10.215.173.1,48276,35.186.224.24,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,api.spotify.com,5094,5790,8,11,2025-10-11T13:35:14.348+01:00,2025-10-11T13:35:15.359+01:00
6,10.215.173.1,42248,142.132.240.1,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Error,listenbrainz.org,4245,1558,18,16,2025-10-11T13:35:14.471+01:00,2025-10-11T13:36:02.826+01:00
17,10.215.173.1,41221,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,content-autofill.googleapis.com,77,173,1,1,2025-10-11T13:35:14.647+01:00,2025-10-11T13:35:14.667+01:00
17,10.215.173.1,49479,142.251.30.95,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,content-autofill.googleapis.com,5209,10082,13,16,2025-10-11T13:35:14.679+01:00,2025-10-11T13:35:14.809+01:00
6,10.215.173.1,48248,142.251.30.95,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,content-autofill.googleapis.com,2658,2720,8,6,2025-10-11T13:35:14.712+01:00,2025-10-11T13:35:14.783+01:00
17,10.215.173.1,15167,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,apresolve.spotify.com,67,83,1,1,2025-10-11T13:35:14.922+01:00,2025-10-11T13:35:14.943+01:00
17,10.215.173.1,8860,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,static.doubleclick.net,68,100,1,1,2025-10-11T13:35:15.072+01:00,2025-10-11T13:35:15.096+01:00
17,10.215.173.1,38271,142.251.30.149,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,static.doubleclick.net,4734,9209,8,12,2025-10-11T13:35:15.111+01:00,2025-10-11T13:35:15.210+01:00
17,10.215.173.1,58786,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,gew1-dealer.g2.spotify.com,72,118,1,1,2025-10-11T13:35:15.300+01:00,2025-10-11T13:35:15.319+01:00
6,10.215.173.1,46134,35.186.224.41,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Error,gew1-dealer.g2.spotify.com,3489,4953,16,14,2025-10-11T13:35:15.323+01:00,2025-10-11T13:36:02.771+01:00
6,10.215.173.1,46572,18.245.218.99,443,11052,ListenBrainz,org.listenbrainz.android,HTTPS,Closed,api-widget.soundcloud.com,3617,2760,9,7,2025-10-11T13:35:19.975+01:00,2025-10-11T13:35:20.080+01:00
17,10.215.173.1,40376,34.120.62.213,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,o4508558300676097.ingest.de.sentry.io,602,266,4,4,2025-10-11T13:35:58.702+01:00,2025-10-11T13:35:58.901+01:00
17,10.215.173.1,16494,10.215.173.2,53,11052,ListenBrainz,org.listenbrainz.android,DNS,Closed,jnn-pa.googleapis.com,67,163,1,1,2025-10-11T13:35:59.024+01:00,2025-10-11T13:35:59.067+01:00
17,10.215.173.1,49479,142.251.30.95,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,jnn-pa.googleapis.com,3718,50806,26,46,2025-10-11T13:35:59.076+01:00,2025-10-11T13:35:59.510+01:00
17,10.215.173.1,43893,142.251.29.136,443,11052,ListenBrainz,org.listenbrainz.android,QUIC,Closed,www.youtube.com,3887,63,5,1,2025-10-11T13:36:02.817+01:00,2025-10-11T13:36:02.846+01:00

My Environment

[ro.build.version.release]: [15]
[ro.build.display.id]: [FP5.VT2E.C.059.20250908]

[07jasjeet]

Can you go to the website and accept any agreements like GDPR compliance in settings?

[RokeJulianLockhart]

@07jasjeet, where would I locate those? (I've replaced my e-mail address and re-authenticated with all OAuth2 connections, but all it did was expose AREQ-3798.)

[07jasjeet]

https://listenbrainz.org/agree-to-terms/

[RokeJulianLockhart]

@07jasjeet, that worked! Thank you. Consequently, should I re-scope this issue to be about displaying a more comprehensible error message when the ULA hasn't been signed?

[07jasjeet]

Yeah that should be the aim here.

In 2.9.5, I was able to login with a new account without agreeing to these particular terms since we already show the same information before sign but weirdly that didn't work for you. Anyways happy you could get through :)