oauth2

What it is and what it does

oauth2 is a Python library that implements the OAuth 1.0 protocol (not OAuth 2.0) for authenticating requests to OAuth-protected APIs. It provides a thin wrapper around HTTP clients, automatically signing requests with consumer credentials and handling the OAuth signature generation. The library has no external runtime dependencies and is designed to work as a low-level building block for higher-level OAuth integrations.

The package was originally forked from earlier OAuth implementations and has been refined with 100% unit test coverage and a simplified API. It extends from httplib2 for HTTP transport and uses a Request class based on dict for flexibility. However, the package is dormant—its last release was in 2015 and it only declares support for Python 2.6, 2.7, 3.3, and 3.4, making it unsuitable for modern Python environments without verification of compatibility.

Use it for:

• Integrating with legacy OAuth 1.0 APIs that have not migrated to OAuth 2.0.
• Building a custom OAuth 1.0 client when higher-level libraries are not available or suitable.
• Maintaining existing applications that depend on oauth2 as a transitive dependency.
• Signing HTTP requests for services that require OAuth 1.0 authentication (e.g., Twitter API v1.1).

Worth the install?

AI-flagged interpretation of the facts on this page — verify before relying

Implements OAuth 1.0 authentication for Python applications, providing client-side request signing and HTTP integration for OAuth-protected APIs.

No, unless you are maintaining legacy code that already depends on this package. The library is dormant (last release 2015, last commit April 2024) and only declares support for Python 2.6–3.4. Modern Python applications should use oauth2-compatible alternatives or migrate to OAuth 2.0. If you must use OAuth 1.0, verify compatibility with your Python version first.

Install

oauth2 on PyPI

pip install oauth2

uv add oauth2

poetry add oauth2

Installing oauth2

Before you install

Low install friction with no runtime dependencies. Maintenance is dormant—last release was in 2015 and the last commit in April 2024, though the repository remains active and the package is still widely depended upon downstream.

License in practice

MIT License (permissive) allows commercial and private use with minimal restrictions, requiring only attribution and inclusion of the license text.

Quickstart

pip install oauth2

import oauth2 as oauth
client = oauth.Client(oauth.Consumer(key='consumer_key', secret='consumer_secret'))
resp, content = client.request('http://example.com/api', 'GET')

Package supports Python 2.6, 2.7, 3.3, and 3.4 only; compatibility with modern Python versions is not declared and likely absent.

Verify before relying

• Whether the package works reliably with Python versions beyond 3.4 despite no declared support.
• Current security posture relative to modern OAuth 1.0 best practices and known attack vectors.
• Whether downstream packages like Flask-Oauth have migrated away or continue active use.

Package facts

Evidence: oauth2-1.9.0.post1-py2.py3-none-any.whl

Keywords: oauth

Tags

More WWW/HTTP packages