From 69c43b749bf5a431b482836343f5a2e9305f987d Mon Sep 17 00:00:00 2001
From: Carey Metcalfe <carey@cmetcalfe.ca>
Date: Thu, 17 Jan 2019 04:46:56 -0500
Subject: [PATCH] Use HTTPS when communicating with Last.fm

---
 supysonic/lastfm.py              | 4 ++--
 supysonic/templates/profile.html | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/supysonic/lastfm.py b/supysonic/lastfm.py
index 52aed99..4bad762 100644
--- a/supysonic/lastfm.py
+++ b/supysonic/lastfm.py
@@ -80,9 +80,9 @@ class LastFm:
 
         try:
             if write:
-                r = requests.post('http://ws.audioscrobbler.com/2.0/', data = kwargs, timeout = 5)
+                r = requests.post('https://ws.audioscrobbler.com/2.0/', data = kwargs, timeout = 5)
             else:
-                r = requests.get('http://ws.audioscrobbler.com/2.0/', params = kwargs, timeout = 5)
+                r = requests.get('https://ws.audioscrobbler.com/2.0/', params = kwargs, timeout = 5)
         except requests.exceptions.RequestException as e:
             logger.warning('Error while connecting to LastFM: ' + str(e))
             return None
diff --git a/supysonic/templates/profile.html b/supysonic/templates/profile.html
index 0713853..b6f4ec5 100644
--- a/supysonic/templates/profile.html
+++ b/supysonic/templates/profile.html
@@ -68,9 +68,9 @@
             <input type="text" class="form-control" id="lastfm" placeholder="Unlinked" readonly>
             <div class="input-group-btn">
               {% if request.user.id == user.id %}
-              <a href="http://www.last.fm/api/auth/?api_key={{ api_key }}&cb={{ request.url_root[:-(request.script_root|length+1)] + url_for('frontend.lastfm_reg', uid = 'me') }}" class="btn btn-default">Link</a>
+              <a href="https://www.last.fm/api/auth/?api_key={{ api_key }}&cb={{ request.url_root[:-(request.script_root|length+1)] + url_for('frontend.lastfm_reg', uid = 'me') }}" class="btn btn-default">Link</a>
               {% else %}
-              <a href="http://www.last.fm/api/auth/?api_key={{ api_key }}&cb={{ request.url_root[:-(request.script_root|length+1)] + url_for('frontend.lastfm_reg', uid = user.id) }}" class="btn btn-default">Link</a>
+              <a href="https://www.last.fm/api/auth/?api_key={{ api_key }}&cb={{ request.url_root[:-(request.script_root|length+1)] + url_for('frontend.lastfm_reg', uid = user.id) }}" class="btn btn-default">Link</a>
               {% endif %}
             </div>
             {% endif %}