requests-gssapi
A GSSAPI authentication handler for python-requests
Decision gist · record as of 2026-08-14
Yes, if you need Kerberos authentication for HTTP requests and have a Kerberos infrastructure in place. The package is stable, permissively licensed, and has no known vulnerabilities. Install friction is low. However, it is aging (last release 302 days ago) and requires the gssapi system library to be installed separately; verify that dependency is available in your environment before committing.AI-flagged interpretation of the facts on this page — verify before relying
Before you install
- A valid Kerberos Ticket-Granting Ticket (TGT) must already exist in the credential cache (verify with klist); the gssapi system library must be installed and available.
- Low install friction with a pure-wheel distribution.
- Maintenance status is aging—last release was 302 days ago, though the repository remains active and the package supports current Python versions (3.8 through 3.14).
License · maintenance · safety
ISC (permissive) — Licensed under ISC (permissive), allowing unrestricted use, modification, and distribution with minimal restrictions.
last release 2025-10-16 (302 days) · last repo commit 2025-10-16 · 34 stars
0 known vulnerabilities (OSV.dev, 2026-08-14) · 360,283 downloads/mo, #7,244 on PyPI
Alternatives
Verify before relying
pip install requests-gssapi
import requests
from requests_gssapi import HTTPSPNEGOAuth
r = requests.get("http://example.org", auth=HTTPSPNEGOAuth())- Whether the gssapi system library dependency is available on all target platforms or requires separate installation.
- Current adoption and community activity level beyond download metrics.
What it is and what it does
requests-gssapi is a thin authentication handler that plugs into the requests HTTP library to perform GSSAPI-based authentication (commonly Kerberos/SPNEGO). It wraps the lower-level gssapi library and presents a requests-compatible auth handler, allowing you to make HTTP requests to servers that require Kerberos negotiation without managing the authentication handshake yourself.
The package assumes you already have a valid Kerberos credential cache (TGT) available on your system—it handles only the HTTP-level negotiation, not credential acquisition. It supports mutual authentication modes, opportunistic (preemptive) authentication for persistent connections, hostname override for load-balanced environments, and explicit principal or mechanism selection. It is a drop-in replacement for the older requests-kerberos library.
Use it for
- Authenticate HTTP requests to Windows/Active Directory-protected services using Kerberos.
- Access internal APIs and web services that require SPNEGO/Negotiate authentication.
- Automate WinRM or other Windows management protocol calls over HTTP with Kerberos credentials.
- Build Python clients for enterprise systems using Kerberos as the authentication mechanism.
- Replace requests-kerberos in existing codebases without rewriting authentication logic.
Worth the install?
AI-flagged interpretation of the facts on this page. Verify before relying on it.
Yes, if you need Kerberos authentication for HTTP requests and have a Kerberos infrastructure in place.
The package is stable, permissively licensed, and has no known vulnerabilities. Install friction is low. However, it is aging (last release 302 days ago) and requires the gssapi system library to be installed separately; verify that dependency is available in your environment before committing.
Install
requests-gssapi on PyPI
Before you install
Low install friction with a pure-wheel distribution. Maintenance status is aging—last release was 302 days ago, though the repository remains active and the package supports current Python versions (3.8 through 3.14).
A valid Kerberos Ticket-Granting Ticket (TGT) must already exist in the credential cache (verify with klist); the gssapi system library must be installed and available.
License in practice
Licensed under ISC (permissive), allowing unrestricted use, modification, and distribution with minimal restrictions.
Quickstart
pip install requests-gssapi
import requests
from requests_gssapi import HTTPSPNEGOAuth
r = requests.get("http://example.org", auth=HTTPSPNEGOAuth())Verify before relying
- Whether the gssapi system library dependency is available on all target platforms or requires separate installation.
- Current adoption and community activity level beyond download metrics.
Package facts
| License | ISC permissive |
| Python support | Supports the current Python release >=3.8 |
| Install friction | Low. Pure-Python wheel |
| Runtime dependencies | 2 packagesrequestsgssapi |
| Maintenance | Aging 302 days since the last release |
| Last repo commit | |
| First released | |
| Downloads | 360,283 / month, #7,244 on PyPI 30-day window, as of 2026-08-14 |
| Known vulnerabilities | None known OSV.dev, checked 2026-08-14 |
| Classifiers | Programming Language :: Python :: 3Programming Language :: Python :: 3.10Programming Language :: Python :: 3.11Programming Language :: Python :: 3.12Programming Language :: Python :: 3.13Programming Language :: Python :: 3.14Programming Language :: Python :: 3.8Programming Language :: Python :: 3.9 |
Evidence: requests_gssapi-1.4.0-py3-none-any.whl
Tags
Let your AI agent find packages like this
Example. Real query, live index.
You found this page by searching. An agent finds it by wishing: SkillFed indexes 14,416 PyPI packages by what they can do, searchable in plain language.
wish › “gssapi requests library”
- requests-gssapiAdds GSSAPI/Kerberos authentication support to the requests HTTP…
- requests-kerberosAdds Kerberos/GSSAPI authentication support to the requests HTTP…
- gssapiPython-GSSAPI wraps the GSSAPI C libraries to provide both low-level…
Give your agent the search over MCP, or paste the wish link into any chat.
More WWW/HTTP packages
urllib3 is an HTTP client library that provides thread-safe connection pooling, SSL/TLS verification, multipart file uploads, request retries, compression support, and proxy handling for Python applications.
Requests is a Python HTTP library that simplifies sending HTTP/1.1 requests with automatic handling of headers, authentication, cookies, and response parsing.
h11 is a pure-Python HTTP/1.1 protocol implementation that handles parsing and serializing HTTP messages without any built-in I/O, letting you integrate it with any network layer you choose.
HTTPX is a fully featured HTTP client library for Python that provides both sync and async APIs, with support for HTTP/1.1 and HTTP/2, plus an integrated command-line client.
Install it if you are building new projects or modernizing existing ones that rely on HTTP.
A minimal low-level HTTP client library that sends HTTP requests with thread-safe and task-safe connection pooling, supporting HTTP/1.1, HTTP/2, proxies, and both sync and async interfaces.
aiohttp is an async HTTP client and server framework built on asyncio, supporting both WebSockets and middleware-based routing for building concurrent web applications.
Install it if you need async HTTP client or server capabilities in asyncio-based applications.
See also requests-kerberos · requests-credssp · gssapi · requests-negotiate-sspi · pyspnego · minikerberos · k5test · winkerberos · kerberos · pykerberos