pythongssapi / requests-gssapi

An authentication handler for using GSSAPI with Python Requests. Drop-in replacement for old requests-kerberos.
Other
32 stars 21 forks source link

Mention non-existing expect continue support in py-requests requires preemptive auth in many cases #40

Closed michael-o closed 2 years ago

michael-o commented 3 years ago

As you might know the unterlying HTTP lib does not support expect continue. If you don't enable preemptive auth requests with a body might fail. I have noticed this on Tomcat with large zip files where size expeeds Tomcats max swallow size. Tomcat will send 401 while the client ist still uploading the body which urllib cannot handle.

Please update the documentation mentioned that preemptive auth is imperative if your target server will reject the request the authentication in flight if authentication hasn't happened and expect continue support isn't present in the client.

michael-o commented 2 years ago

Please reopen.