{"categories":[{"label":"WWW/HTTP","url":"https://skillfed.io/packages/category/internet-www-http/4"}],"enrichment":{"capability":"Adds CredSSP authentication support to the requests library, enabling HTTPS requests to Windows servers using NTLM or Kerberos credentials with credential delegation.","skillfed_tags":["windows-auth","credssp-protocol","abandoned"],"use_cases":["Authenticate requests to WinRM endpoints on Windows servers using domain credentials.","Build Python tools that interact with Windows-only APIs or services requiring CredSSP.","Implement credential delegation for multi-hop scenarios where a server must forward credentials to another system.","Encrypt messages sent over CredSSP-authenticated TLS channels for additional protocol-level security.","Enforce minimum CredSSP protocol versions to reject unpatched servers vulnerable to CVE-2018-0886."],"what_it_does":"requests-credssp extends the requests library to authenticate against Windows servers using the CredSSP protocol, which combines TLS encryption with SPNEGO-negotiated credentials (NTLM or Kerberos). It enables double-hop authentication, allowing your credentials to be delegated to a remote server. The package supports CredSSP protocol versions 2 through 6 and provides message encryption via wrap/unwrap functions for secure token exchange.\n\nOut of the box, it handles NTLM authentication on any platform. Kerberos support requires optional system dependencies and additional configuration on Unix-like systems. The library exposes configuration options for authentication mechanism selection, TLS version constraints, and minimum CredSSP protocol version enforcement\u2014useful for working around compatibility issues with older Windows hosts or enforcing security patches.","worth_installing":"No\u2014the package is abandoned (last release February 2022, last commit May 2023) with no active maintenance or security updates. While it has low install friction and permissive licensing, the lack of ongoing support poses a risk for production use, especially for security-sensitive authentication. Consider only if you are maintaining legacy code with no alternative and can accept the security and compatibility risks."},"id":"requests-credssp","links":{"html":"https://skillfed.io/packages/requests-credssp","md":"https://skillfed.io/packages/requests-credssp.md","pypi":"https://pypi.org/project/requests-credssp/"},"maintenance":{"status":"abandoned"},"meta":{"latest_release":"2022-02-21","license_spdx":null,"license_treatment":"permissive","name":"requests-credssp","python_support":"supports_current","summary":"HTTPS CredSSP authentication with the requests library."},"popularity":{"monthly_downloads":314921,"position":7692,"tier":"top_15000"},"security":{"n_vulnerabilities":0},"version":"2.0.0"}