How do I use basic HTTP authentication with the Python Requests library?

Question

I'm trying to use basic HTTP authentication in Python. I am using the Requests library:

auth = requests.post('http://' + hostname, auth=HTTPBasicAuth(user, password))
request = requests.get('http://' + hostname + '/rest/applications')

Response form auth variable:

<<class 'requests.cookies.RequestsCookieJar'>[<Cookie JSESSIONID=cb10906c6219c07f887dff5312fb for appdynamics/controller>]>
200
CaseInsensitiveDict({'content-encoding': 'gzip', 'x-powered-by': 'JSP/2.2', 'transfer-encoding': 'chunked', 'set-cookie': 'JSESSIONID=cb10906c6219c07f887dff5312fb; Path=/controller; HttpOnly', 'expires': 'Wed, 05 Nov 2014 19:03:37 GMT', 'server': 'nginx/1.1.19', 'connection': 'keep-alive', 'pragma': 'no-cache', 'cache-control': 'max-age=78000', 'date': 'Tue, 04 Nov 2014 21:23:37 GMT', 'content-type': 'text/html;charset=ISO-8859-1'})

But when I try to get data from different location, I'm getting HTTP Status 401 error:

<<class 'requests.cookies.RequestsCookieJar'>[]>
401
CaseInsensitiveDict({'content-length': '1073', 'x-powered-by': 'Servlet/3.0 JSP/2.2 (GlassFish Server Open Source Edition 3.1.2.2 Java/Oracle Corporation/1.7)', 'expires': 'Thu, 01 Jan 1970 00:00:00 UTC', 'server': 'nginx/1.1.19', 'connection': 'keep-alive', 'pragma': 'No-cache', 'cache-control': 'no-cache', 'date': 'Tue, 04 Nov 2014 21:23:37 GMT', 'content-type': 'text/html', 'www-authenticate': 'Basic realm="controller_realm"'})

As far as I understand, in the second request session parameters are not substituted.

I don't know how to do it, and I can't find an appropriate manual — oleksii
– oleksii, Commented Nov 4, 2014 at 21:43
I mean, you need to include your code for the second request. By second request are you referring to the 'get' request? — Clarus
– Clarus, Commented Nov 4, 2014 at 21:47

Martijn Pieters · Accepted Answer · 2020-03-04 21:32:31Z

160

You need to use a session object and send the authentication each request. The session will also track cookies for you:

session = requests.Session()
session.auth = (user, password)

auth = session.post('http://' + hostname)
response = session.get('http://' + hostname + '/rest/applications')

edited Mar 4, 2020 at 21:32

answered Nov 4, 2014 at 22:54

Martijn Pieters

1.1m326 gold badges4.2k silver badges3.4k bronze badges

Sign up to request clarification or add additional context in comments.

7 Comments

oleksii Over a year ago

Thanks for your reply, but it's doesn't work too :( Error is the same as previous

Martijn Pieters Over a year ago

@oleksii: define 'does not work'. And when you use POST (with no parameters, I note), does the server return any token or anything that you'd need to use for the REST API here? In other words, what does the documentation for the API state you need to do?

Martijn Pieters Over a year ago

@Sarit how so? Note that I link to the official documentation in my answer.

joe Over a year ago

@MartijnPieters After read your comment 10th fimes. I still not understand. I can use basicAuth in the Postman. Postman will digest username/password into header Authorization: Basic <....>. But I could not be able to connect why I need session here, but it works! What's wrong with @oleksii attempt?

Martijn Pieters Over a year ago

@Sarit: The header needs to be included in every request that you send to the server; usually the only way the server can authenticate you based on the header being present, no other info. The easiest way to add the header to every request is to use a session. You don't have to, but then you have to include the header manually in each request.

|

Daniel Darabos · Accepted Answer · 2022-09-01 11:08:03Z

124

import requests

from requests.auth import HTTPBasicAuth
res = requests.post('https://api.github.com/user', auth=HTTPBasicAuth('user', 'password'))
print(res)

edited Sep 1, 2022 at 11:08

Daniel Darabos

27.6k10 gold badges108 silver badges122 bronze badges

answered Jan 1, 2019 at 7:30

Kuppuram

1,2651 gold badge8 silver badges3 bronze badges

2 Comments

Marcin Kulik Over a year ago

requests.posts does not work for me but requests.get does, there is also a shorter version requests.get(url, auth=(username, password))

wim Over a year ago

This doesn't answer the question, which is about using the session cookie to authenticate subsequent requests.

alireza ranjbaran · Accepted Answer · 2020-12-14 08:50:00Z

57

In Python3 it becomes easy:

import requests
response = requests.get(uri, auth=(user, password))

answered Dec 14, 2020 at 8:50

alireza ranjbaran

1,13511 silver badges14 bronze badges

2 Comments

Pratyush Raizada Over a year ago

You may need to additionally install requests-toolbelt pip install requests-toolbelt

wim Over a year ago

This doesn't answer the question, which is about using the session cookie to authenticate subsequent requests.

Anto · Accepted Answer · 2022-01-28 11:58:41Z

3

Below one worked for me

#!/usr/bin/python3
import xml.etree.ElementTree as ET
import requests
from requests.auth import HTTPBasicAuth

url = 'http://172.25.38.135:600/service/xx/users'      # my URL     
response = requests.get(url, auth=HTTPBasicAuth('admin', 'adminpass!'))

string_xml = response.content
tree = ET.fromstring(string_xml)
ET.dump(tree)

answered Jan 28, 2022 at 11:58

Anto

4,0361 gold badge23 silver badges24 bronze badges

1 Comment

wim Over a year ago

This doesn't answer the question, which is about using the session cookie to authenticate subsequent requests.

Aaron · Accepted Answer · 2020-02-11 15:40:42Z

0

for python 2:

base64string = base64.encodestring('%s:%s' % (username, password)).replace('\n', '')

request = urllib2.Request(url)

request.add_header("Authorization", "Basic %s" % base64string) 

result = urllib2.urlopen(request)
        data = result.read()

edited Feb 11, 2020 at 15:40

Aaron

2,5053 gold badges27 silver badges33 bronze badges

answered Feb 11, 2020 at 14:46

vc2310

1551 gold badge1 silver badge7 bronze badges

1 Comment

wim Over a year ago

This doesn't answer the question, which is about using the session cookie to authenticate subsequent requests.

codeaprendiz · Accepted Answer · 2021-06-08 08:05:01Z

-2

The following worked for me

from requests.auth import HTTPDigestAuth
url = 'https://someserver.com'
requests.get(url, auth=HTTPDigestAuth('user', 'pass'))

answered Jun 8, 2021 at 8:05

codeaprendiz

3,2332 gold badges38 silver badges58 bronze badges

1 Comment

wim Over a year ago

This doesn't answer the question, which is about using the session cookie to authenticate subsequent requests.

Collectives™ on Stack Overflow

How do I use basic HTTP authentication with the Python Requests library?

6 Answers 6

7 Comments

2 Comments

2 Comments

1 Comment

1 Comment

1 Comment

Your Answer

Linked

Hot Network Questions

Collectives™ on Stack Overflow

6 Answers 6

7 Comments

2 Comments

2 Comments

1 Comment

1 Comment

1 Comment

Your Answer

Sign up or log in

Post as a guest

Linked

Related