{"categories":[{"label":"Security","url":"https://skillfed.io/packages/category/security"}],"enrichment":{"capability":"An OAuth 2.x client for Python that obtains, refreshes, and revokes tokens from any OAuth2.x/OIDC-compliant Authorization Server, built on top of the requests HTTP library.","skillfed_tags":["oauth2","openid-connect","token-management"],"use_cases":["Authenticate to third-party REST APIs that require OAuth2 bearer tokens without manually managing token refresh cycles","Implement OAuth2 client flows (Authorization Code, Client Credentials) to obtain tokens from your own or third-party Authorization Servers","Build applications that need to support OpenID Connect for user authentication and identity verification","Manage token revocation and introspection for security-sensitive applications requiring explicit token lifecycle control","Develop multi-grant OAuth2 clients that switch between different authentication methods based on deployment context"],"what_it_does":"requests_oauth2client is an OAuth 2.x and OpenID Connect client that extends the requests HTTP library to handle token lifecycle management. It supports multiple standardized grant types (Client Credentials, Authorization Code, Refresh Token, JWT Bearer, Device Authorization, and others) and can work with any OAuth2.x/OIDC-compliant Authorization Server. The package handles token expiration tracking, refresh logic, and client authentication methods including Client Secret Post, Client Secret Basic, Client Secret JWT, and Private Key JWT.\n\nThe library provides two main entry points: BearerToken for using an already-obtained access token as a requests auth handler, and OAuth2Client for the full OAuth2 flow including token endpoint communication, token revocation, introspection, and PKCE support. It also wraps requests.Session to simplify REST API calls with or without OAuth2 authentication. The package is in Beta status, supports Python 3.9 through 3.14, and has no known vulnerabilities.","worth_installing":"Yes, with conditions. The package is actively maintained, has low install friction, and covers a comprehensive set of OAuth2 and OIDC standards. It is suitable for production use if your Authorization Server is standards-compliant. However, verify that the specific grant types and extensions you need are supported, and test token refresh behavior in your concurrency model before deploying to high-traffic services."},"id":"requests-oauth2client","links":{"html":"https://skillfed.io/packages/requests-oauth2client","md":"https://skillfed.io/packages/requests-oauth2client.md","pypi":"https://pypi.org/project/requests-oauth2client/"},"maintenance":{"status":"active"},"meta":{"latest_release":"2025-12-22","license_spdx":"Apache-2.0","license_treatment":"permissive","name":"requests-oauth2client","python_support":"supports_current","summary":"An OAuth2.x client based on `requests`."},"popularity":{"monthly_downloads":908444,"position":4753,"tier":"top_5000"},"security":{"n_vulnerabilities":0},"version":"1.8.0"}