Issues

• Security: bump oauthlib minimum to 4.0.0 (CVE-2026-49264, CVE-2026-49265)

  requests/requests-oauthlib#576 · Filter by author friedrichwilken opened on Oct 1, 2026

• Drop the versionless License :: classifier now that license is a valid SPDX expression

  requests/requests-oauthlib#572 · Filter by author btschwertfeger opened on Aug 26, 2026

• Request to Declare Python 3.13 Compatibility on PyPI

  requests/requests-oauthlib#567 · Filter by author grokas-splunk opened on Sep 8, 2025

• refresh_token and client_id

  requests/requests-oauthlib#566 · Filter by author jvanasco opened on Aug 31, 2025
  1

• you still need to update expires_in to trigger the refresh.

  requests/requests-oauthlib#561 · Filter by author hramrach opened on Jun 19, 2025
  5

• Add support for "Device Authorization Grant"

  requests/requests-oauthlib#560 · Filter by author mdc-webdb opened on Jun 16, 2025
  1

• BUG - Unable to set multiple 'resource' parameters in token request body, as specified in RFC 8707 : Resource Indicators for OAuth 2.0

  requests/requests-oauthlib#558 · Filter by author nuxwin opened on Dec 28, 2024
  1

• OAuth2Session.request() does not allow custom auth specific to refresh requests

  requests/requests-oauthlib#557 · Filter by author kiaradlf opened on Dec 13, 2024
  1

• refresh token and required client secret

  requests/requests-oauthlib#554 · Filter by author tamis-laan opened on Aug 26, 2024

• BROKEN DOCUMENTATION: Backend Flow

  requests/requests-oauthlib#551 · Filter by author bcodermicro opened on Jul 10, 2024
  2

• Can you please add the ability to retrieve and provide the code verifier

  requests/requests-oauthlib#550 · Filter by author Colin-b opened on Jul 4, 2024
  4

• Issue refreshing Wix OAuth tokens - cannot send payload as JSON using refresh_token_request compliance hook

  requests/requests-oauthlib#544 · Filter by author skray opened on Apr 19, 2024
  4

• Release template purposal

  Contributor Friendlydevops
  requests/requests-oauthlib#543 · Filter by author jtroussard opened on Mar 26, 2024
  2

• 1.4.0 claims to support Python 2.7 in PyPI but does not

  requests/requests-oauthlib#540 · Filter by author amc1804 opened on Mar 24, 2024
  2

• Access tokens leaked in logs when using DEBUG level

  requests/requests-oauthlib#536 · Filter by author erlendvollset opened on Mar 15, 2024

• (insecure_transport) OAuth 2 MUST utilize https.

  requests/requests-oauthlib#524 · Filter by author ssk199441 opened on Jan 8, 2024
  4

• refresh token workflow

  requests/requests-oauthlib#516 · Filter by author martibosch opened on Aug 3, 2023
  2

• Why is the backend client workflow asking for a code or a response url?

  bugContributor Friendly
  requests/requests-oauthlib#512 · Filter by author DrYSG opened on May 15, 2023
  5

• Redo request after token is updated

  requests/requests-oauthlib#510 · Filter by author ewtoombs opened on Jan 19, 2023

• Compliance fix for tokens that never expire (e.g. Mailchimp)

  requests/requests-oauthlib#509 · Filter by author corradio opened on Jan 16, 2023

• Scope changes with Microsoft services & offline_access

  requests/requests-oauthlib#507 · Filter by author attie-argentum opened on Nov 16, 2022
  1

• Add refresh token exception hook to list of compliance hooks?

  requests/requests-oauthlib#504 · Filter by author ramennoodles20 opened on Oct 24, 2022

• oauth2_session.OAuth2Session.refresh_token creates infinite loop with Exchange Online when token expires

  requests/requests-oauthlib#498 · Filter by author cmin764 opened on Jul 6, 2022

• why passing requests kwargs that may contain request params to refresh_token request ?

  requests/requests-oauthlib#491 · Filter by author ollofx opened on May 13, 2022
  1

• 'requests' distribution not found when listed in install_requires together with requests_oauthlib

  requests/requests-oauthlib#490 · Filter by author akenney opened on Apr 13, 2022