---
id: authcaptureproxy
version: "1.3.7"
license: Apache-2.0
license_treatment: permissive
maintenance: active
---

# authcaptureproxy — A Python project to create a proxy to capture authentication information from a webpage. This is useful to capture oauth login details without access to a third-party oauth.

License: permissive · Maintenance: active · Downloads: 532.2K/mo

## What it is and what it does

authcaptureproxy is a Python proxy server that sits between a browser and a web application to intercept and log authentication credentials as they pass through HTTP traffic. It's designed for scenarios where you need to extract login details from a website without direct access to a third-party OAuth provider.

The package provides a command-line interface via typer to set up and run the proxy, with HTML parsing via beautifulsoup4 to identify credential fields in web forms. It uses aiohttp and httpx for async HTTP handling and yarl for URL manipulation. The project is in Alpha status with minimal adoption, so it's best suited for development and testing rather than production use.

Use it for:

- Extract login credentials from a website for testing when OAuth provider access is unavailable.
- Debug authentication flows by observing raw credential submission and server responses.
- Capture OAuth tokens from a web application to understand the authentication handshake.
- Automate credential harvesting for security testing or penetration testing scenarios.
- Log and analyze how a website handles sensitive form data during login.

## Worth the install?

AI-flagged interpretation of the facts above — verify before relying.

Intercepts and logs authentication credentials from web traffic by acting as a proxy between a browser and target website.

Yes, with conditions. Install if you need to intercept web authentication for development or testing in a controlled environment. Low install friction, active maintenance, and permissive Apache-2.0 license make it accessible. However, avoid production use: Alpha status and minimal adoption mean you should thoroughly test and audit it first. Intercepting credentials raises significant security and legal concerns—use only on systems you own or have explicit permission to test.

## Install

pip install authcaptureproxy
uv add authcaptureproxy
poetry add authcaptureproxy

## Installing authcaptureproxy

Before you install: Low friction install with a pure-Python wheel. Actively maintained as of 2026-08-03 with recent commits; however, the project is marked Alpha status and has minimal adoption (4 repository stars), so production use should be approached cautiously.

License in practice: Licensed under Apache-2.0 (permissive), so you can use, modify, and distribute it freely provided you include a copy of the license and note any changes made.

Quickstart:

pip install authcaptureproxy

from authcaptureproxy.cli import proxy_example
proxy_example()

Requires Python 3.10 or later; depends on aiohttp, httpx, beautifulsoup4, and typer for async HTTP, HTML parsing, and CLI functionality.

Verify before relying:

- Whether the proxy works with modern OAuth 2.0 flows and multi-factor authentication.
- Performance and stability under sustained traffic or with large credential payloads.
- Compatibility with HTTPS interception and certificate handling.
- Whether captured credentials are stored securely or only logged to stdout/files.

## Package facts

- License: Apache-2.0 (permissive)
- Python support: supports_current
- Install friction: low
- Maintenance: active
- Downloads: 532.2K/month (top 15,000 on PyPI)
- Known vulnerabilities: none known

## Tags

web authentication proxy capture, oauth credential interception, login details logging proxy, http proxy authentication, password capture proxy, browser auth interceptor, oauth without third-party, web credential sniffer, authentication, proxy, security-testing

[View on SkillFed](https://skillfed.io/packages/authcaptureproxy) · [View on PyPI](https://pypi.org/project/authcaptureproxy/)