Spotify has DRM, and you can find open-source reimplementations of it on github.

Their native clients use a weak hand-rolled DRM scheme (which is where the ogg vorbis files come from), whereas the web player uses Widevine with AAC.