{"categories":[{"label":"Communications","url":"https://skillfed.io/packages/category/communications"}],"enrichment":{"capability":"Handles OAuth2 authentication flows (authorization code, user credentials, client credentials) and token management for Python applications integrating with OAuth2 servers.","skillfed_tags":["oauth2","authentication","token-management"],"use_cases":["Implement authorization code flow with PKCE for desktop or mobile applications redirecting to a local callback handler","Obtain and refresh access tokens using user credentials for server-to-user OAuth2 integrations","Manage client credentials grants for service-to-service authentication without user interaction","Extend CredentialManager to parse and store additional token response fields like OpenID Connect id_token","Integrate OAuth2 authentication into applications that need to work behind HTTP proxies"],"what_it_does":"OAuth2Client is a Python library that abstracts the OAuth2 authentication process, handling three common token flows: authorization code (with optional PKCE support), user credentials, and client credentials. It manages token lifecycle including refresh and expiration detection, and provides a CredentialManager class that can be extended to handle server-specific token response fields like OpenID's id_token.\n\nThe library starts a local HTTP server to receive authorization callbacks in the authorization code flow, and supports proxy configuration for all flows. It is built on top of the requests library but has no other runtime dependencies, making it lightweight to install. However, the package has not been actively developed since April 2023, and token expiration detection may not be accurate for all OAuth2 server implementations without subclassing and customization.","worth_installing":"Yes, with conditions. The package is stable and has no known vulnerabilities, making it suitable for straightforward OAuth2 flows in applications that can tolerate aging maintenance. However, verify the license before use, test token expiration handling against your OAuth2 server, and be prepared to maintain or fork the code if the upstream project does not resume active development. Not recommended for new projects requiring ongoing security updates or support."},"id":"oauth2-client","links":{"html":"https://skillfed.io/packages/oauth2-client","md":"https://skillfed.io/packages/oauth2-client.md","pypi":"https://pypi.org/project/oauth2-client/"},"maintenance":{"status":"aging"},"meta":{"latest_release":"2023-04-28","license_spdx":null,"license_treatment":"unclear","name":"oauth2-client","python_support":"unspecified","summary":"A client library for OAuth2"},"popularity":{"monthly_downloads":203781,"position":9624,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"1.4.2"}