Xfinity auth failures on some channels

Channels DVR Server TV Everywhere
#1

Seeing issues with CNN channels (CNN, HLN, CNNi) on Xfinity, but working on Spectrum. I'm getting a Chrome_Auth_Timeout when trying to stream. Updated to latest pre-release and still see the issue.

2019/08/14 11:39:42 [TVE] action=auth mvpd=Comcast_SSO requestor=CNN
2019/08/14 11:39:42 [TVE] action=navigate url=https://sp.auth.adobe.com/adobe-services/authenticate/saml?noflash=true&mso_id=Comcast_SSO&requestor_id=CNN&no_iframe=true&domain_name=adobe.com&redirect_url=https%3A%2F%2Fsp.auth.adobe.com%2Fadobe-services%2FcompletePassiveAuthentication
2019/08/14 11:39:42 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/authenticate/saml
2019/08/14 11:39:42 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/authorize
2019/08/14 11:39:43 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/login
2019/08/14 11:39:43 [TVE] action=auth_domain domain=login.xfinity.com
2019/08/14 11:39:43 [TVE] action=wait_for_page
2019/08/14 11:39:51 [TVE] action=page_ready
2019/08/14 11:39:51 [TVE] action=wait_for_page done=true reason=page_ready
2019/08/14 11:39:53 [TVE] action=fill_form [email protected]
2019/08/14 11:39:53 [TVE] action=request type=Document method=POST url=https://login.xfinity.com/login
2019/08/14 11:39:53 [TVE] action=wait_for_auth
2019/08/14 11:39:59 [TVE] action=page_ready
2019/08/14 11:40:05 [TVE] action=auth_timed_out
2019/08/14 11:40:05 [TVE] action=screenshot
2019/08/14 11:40:09 [TVE] action=auth mvpd=Comcast_SSO requestor=CNN
2019/08/14 11:40:10 [TVE] action=navigate url=https://sp.auth.adobe.com/adobe-services/authenticate/saml?noflash=true&mso_id=Comcast_SSO&requestor_id=CNN&no_iframe=true&domain_name=adobe.com&redirect_url=https%3A%2F%2Fsp.auth.adobe.com%2Fadobe-services%2FcompletePassiveAuthentication
2019/08/14 11:40:10 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/authenticate/saml
2019/08/14 11:40:10 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/authorize
2019/08/14 11:40:10 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/login
2019/08/14 11:40:10 [TVE] action=auth_domain domain=login.xfinity.com
2019/08/14 11:40:11 [TVE] action=wait_for_page
2019/08/14 11:40:17 [TVE] action=page_ready
2019/08/14 11:40:17 [TVE] action=wait_for_page done=true reason=page_ready
2019/08/14 11:40:19 [TVE] action=fill_form [email protected]
2019/08/14 11:40:19 [TVE] action=request type=Document method=POST url=https://login.xfinity.com/login
2019/08/14 11:40:19 [TVE] action=wait_for_auth
2019/08/14 11:40:25 [TVE] action=page_ready
2019/08/14 11:40:31 [TVE] action=auth_timed_out
2019/08/14 11:40:31 [TVE] action=screenshot
Provider - Xfinity
#2

Check http://x.x.x.x:8089/providers/tve/error_screenshot.png to see where the login is failing.

#3

Claims the login/password is incorrect, but just tried rescanning a couple other channels, TBS, CSPAN, and no issue.

52%20PM
Screen Shot 2019-08-14 at 1.02.52 PM.png1246×838 133 KB

#4

Does it work if you visit go.cnn.com and login there?

When you rescanned the other channels, does the log show "[TVE] action=auth"? If not, it's probably still cached from the previous login and using that without trying to login again. Comcast requires each channel to relogin every 30 days.

Getting Cable provider authentication failed with xfinity
#5

Logging in at CNN with xfinity credentials works. Log shows CSPAN/TBS seem to be getting authorized, Action=Authed

2019/08/14 13:03:06 [TVE] action=auth mvpd=Comcast_SSO requestor=C-SPAN
2019/08/14 13:03:06 [TVE] action=navigate url=https://sp.auth.adobe.com/adobe-services/authenticate/saml?noflash=true&mso_id=Comcast_SSO&requestor_id=C-SPAN&no_iframe=true&domain_name=adobe.com&redirect_url=https%3A%2F%2Fsp.auth.adobe.com%2Fadobe-services%2FcompletePassiveAuthentication
2019/08/14 13:03:06 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/authenticate/saml
2019/08/14 13:03:07 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/authorize
2019/08/14 13:03:07 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/login
2019/08/14 13:03:07 [TVE] action=auth_domain domain=login.xfinity.com
2019/08/14 13:03:08 [TVE] action=wait_for_page
2019/08/14 13:03:12 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/authorize
2019/08/14 13:03:12 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/oauth2
2019/08/14 13:03:13 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/completePassiveAuthentication
2019/08/14 13:03:13 [TVE] action=authed
2019/08/14 13:03:13 [TVE] action=wait_for_page done=true reason=auth_finished
2019/08/14 13:03:13 [TVE] action=cookies num_domains=2 num_cookies=17
2019/08/14 13:03:25 [TVE] action=auth mvpd=Comcast_SSO requestor=TBS
2019/08/14 13:03:25 [TVE] action=navigate url=https://sp.auth.adobe.com/adobe-services/authenticate/saml?noflash=true&mso_id=Comcast_SSO&requestor_id=TBS&no_iframe=true&domain_name=adobe.com&redirect_url=https%3A%2F%2Fsp.auth.adobe.com%2Fadobe-services%2FcompletePassiveAuthentication
2019/08/14 13:03:25 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/authenticate/saml
2019/08/14 13:03:25 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/authorize
2019/08/14 13:03:26 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/login
2019/08/14 13:03:26 [TVE] action=auth_domain domain=login.xfinity.com
2019/08/14 13:03:26 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/logout
2019/08/14 13:03:26 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/logout
2019/08/14 13:03:26 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/sp-logout
2019/08/14 13:03:26 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/logout
2019/08/14 13:03:26 [TVE] action=request type=Document method=GET url=https://login.xfinity.com/login
2019/08/14 13:03:27 [TVE] action=wait_for_page
2019/08/14 13:03:31 [TVE] action=request type=Document method=GET url=https://oauth.xfinity.com/oauth/authorize
2019/08/14 13:03:31 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/oauth2
2019/08/14 13:03:33 [TVE] action=request type=Document method=GET url=https://sp.auth.adobe.com/adobe-services/completePassiveAuthentication
2019/08/14 13:03:33 [TVE] action=authed
2019/08/14 13:03:33 [TVE] action=wait_for_page done=true reason=auth_finished
2019/08/14 13:03:33 [TVE] action=cookies num_domains=2 num_cookies=21
#6

I think your credentials are incorrect, atleast the ones you put into the DVR.

Those other sites are not presenting a login form due to Comcast Auto-Authentication. There's no action=fill_form so the login is happening automatically. Auto-authentication must be off for CNN, so there it tries to login and fails.

Getting Cable provider authentication failed with xfinity
#7

is there a way to check the saved credentials, or re-enter, or do I have to remove Xfinity TVE source and re-add?

#8

No way to pull the creds out, nor to update them.

Let me see if I can add an endpoint to update the credentials so you don't have to rescan everything from scratch...

1 Like
#9

Update to v2019.08.14.2046, then run in Terminal.app:

curl -XPUT --data-binary '{"pass":"NEWPASSWORD"}' http://127.0.0.1:8089/providers/tve/mvpds/Comcast_SSO/credentials

1 Like
Updating TVE Password
(Xfinity) TVE not working - Cable Provider auth failed / password reset
Update TVE SSO Password?
Getting Cable provider authentication failed with xfinity
Delete TV Everywhere source?
Tv everywhere password change
#10

I ran that, no visible output. Went back and scanned CNN again and still get the Auth timeout. Should I have been prompted somewhere to renter my credentials?

#11

No, the password goes in the command where it says NEWPASSWORD

#12

Sorry, missed that the first time. Re-ran with correct password inserted. Still failed, restarted DVR, but no luck.

I haven't changed my password recently, so that seemed unusual. The one thing I noticed when trying to login on cnn.go.co was it didn't accept my email as login, only the username. So perhaps cnn login requires username only, whereas other TVE accepts email/password.

#13

Oh, well if it failed on go.cnn.com then it is going to fail the exactly the same way from the DVR.

You can update your username with the same command:

curl -XPUT --data-binary '{"user":"NEWUSERNAME"}' http://127.0.0.1:8089/providers/tve/mvpds/Comcast_SSO/credentials

2 Likes
Provider - Hulu Live TV
TVE - "Blocked by Xfinity"
Update TVE SSO Password?
Delete TV Everywhere source?
Xfinity Constantly asking me to change my password
Provider - Hulu Live TV
#14

Getting closer, appreciate the help. I mistyped my username after cutting and pasting... But subsequent attempts to run the command just hang. Do I have to undo something to re-run the Curl command? I tried restarting DVR and restarting the computer, no luck.

#15

If the command hangs you have entered it incorrectly. Probably an unbalanced quote.

#16

Finally got it sorted, having been testing since initial beta launch, I had missed the notes on TVE for Xfinity saying if you use an email address some channels may not work, hence why I hadn't noticed it until now. Interesting thing is for the channels that had been working, they must have used a login method that ignored 2FA. Once I got the username updated in Channels, CNN still failed due to needing 2FA turned off. So I created the sub account, used your command to change the user/pass again, and now all are up and running.
Thanks again for the help yesterday, I know I took up an unfair amount of your time, but you and the other developers are what makes Channels so awesome.

1 Like
#17

No worries. I actually added that message after you ran into the issue a few days ago. So this has been a good learning experience on the caveats around Xfinity and hopefully will save other users headaches in the future.

2 Likes
#18

Doesn't work for me using curl for windows.

>curl -v -XPUT --data-binary '{"user":"newusername"}' http://192.168.1.3:8089/providers/tve/mvpds/Comcast_SSO/credentials
*   Trying 192.168.1.3:8089...
* TCP_NODELAY set
* Connected to 192.168.1.3 (192.168.1.3) port 8089 (#0)
> PUT /providers/tve/mvpds/Comcast_SSO/credentials HTTP/1.1
> Host: 192.168.1.3:8089
> User-Agent: curl/7.65.3
> Accept: */*
> Content-Length: 20
> Content-Type: application/x-www-form-urlencoded
>
* upload completely sent off: 20 out of 20 bytes
* Mark bundle as not supporting multiuse
< HTTP/1.1 400 Bad Request
< Cache-Control: no-cache, no-store
< Date: Fri, 16 Aug 2019 23:36:28 GMT
< Content-Length: 66
< Content-Type: text/plain; charset=utf-8
<
{"error":"invalid character '\\'' looking for beginning of value"}* Connection #0 to host 192.168.1.3 left intact
#19

Windows has crazy quoting rules, which differ between powershell and command prompt. You would have to use double quotes around the json, and then escape all the quotes inside with \"

1 Like
#20

Thanks, that fixed it.

1 Like