JSON API v5

The current JSON API version is 5. Two different endpoints are available:

Unless noted otherwise JSON-encoded requests sent by the client within the HTTP POST body are encrypted using Blowfish ECB and converted to hexadecimal notation with lowercase letters.

These URL parameters must be appended to the endpoint above if available:

Name

Description

method

Method name

auth_token

User auth token if available, partner auth token or empty if neither is known yet.

partner_id

Partner id obtained by Partner login or empty

user_id

User id as obtained by User login or empty

For instance when calling User login two parameters are known: method and partner_id. The URL in this case would be http://tuner.pandora.com/services/json/?method=auth.userLogin&partner_id=123. Make sure you URL encode the parameter’s values.

The following values must be present in every JSON request object (if available):

Name

Type

Description

userAuthToken

string

User auth token, see User login

syncTime

int

Synchonized time. Calculation: current time + (time of Partner login request – syncTime from Partner login response). This is a protection against replay-attacks.

Every response includes the key stat which indicates success (ok) or failure (fail) of the resquest. Failed requests contain an error code and message whereas successful requests carry actual response data in the key result:

{
    "stat": "ok",
    "result": {
    }
}
{
    "stat": "fail",
    "message": "An unexpected error occurred",
    "code": 1008
}