Registry / auth-security / python-openid

python-openid

library2.2.5pypypiunverified

Python OpenID library for server and consumer implementations. Current version is 2.2.5, released 2014. In maintenance mode with no active development; last release was over a decade ago.

auth-security serialization

pip install python-openid

github ↗package ↗

INSTALL

IMPORT

SIG · PYTHON-OPENID

python-openid

auth-securitypythonv2.2.5

Install

2.6s avg

Import

—

Disk

17MB

Pass rate

10/ 10

Env Coverage10 / 10

glibc

3.9–3.13

musl

3.9–3.13

Install & Compatibility

Where this runs

tested against v2.2.5 · pip install

no network on importno background threads

Install × environment matrix

Each cell = how many times install + import succeeded across repeated harness runs. Partial = flaky.
glibc = Debian/Ubuntu slim · musl = Alpine Linux

musl

py 3.10–3.95 runs

installs and imports cleanly · install 0.0s · import 0.000s · 19.9MB

glibc

py 3.10–3.95 runs

installs and imports cleanly · install 2.6s · import 0.000s · 20MB

17MB installed

● package 17MB

Code

Verified usage

Verified import paths — ran on the pinned version, not inferred.

Consumer

✓ from openid.consumer import Consumer

✗ from openid.consumer.consumer import Consumer

Initialize a Consumer with a memory store and default fetcher to begin the OpenID authentication flow.

from openid.consumer.consumer import Consumer from openid.store.memstore import MemoryStore from openid.fetchers import setDefaultFetcher, Urllib2Fetcher store = MemoryStore() consumer = Consumer({}, store) setDefaultFetcher(Urllib2Fetcher()) return_to = 'http://example.com/openid/return' # Use consumer.begin(openid_url) to initiate authentication # Then handle the response in your return endpoint.

Debug

Known issues

breakingPython 2 only: python-openid 2.x is Python 2 only. No Python 3 official release exists.

fix

Use a fork like python3-openid or migrate to python-openid2 (which supports Python 3 though still unmaintained).

affects: 2.x

deprecatedLast release in 2014: The library is effectively dead. No security patches, no modern OpenID Connect support.

fix

Consider using a maintained alternative like python3-openid or authlib.

affects: all

gotchaDependency on defusedxml not enforced: You must manually install defusedxml for safe XML parsing, otherwise vulnerable to XXE.

fix

Install defusedxml: pip install defusedxml

affects: 2.2.5

gotchaFetcher configuration required: You must set a default fetcher (e.g., Urllib2Fetcher) before making requests, or discovery will fail silently.

fix

Call openid.fetchers.setDefaultFetcher(Urllib2Fetcher()) early in your app.

affects: 2.x

Upgrade

Version history

2.2.5latest on PyPI · released Jul 1, 2010

Audit

Dependencies

defusedxmloptionalUsed for safe XML parsing to prevent XXE attacks.

Agent activity

27 hits · last 30 days

node

OpenAI (training)

Resources

githubhttp://github.com/openid/python-openid ↗

packagehttps://pypi.org/project/python-openid/ ↗