rebuild_auth() — requests Function Reference

Architecture documentation for the rebuild_auth() function in sessions.py from the requests codebase.

Function python CoreAPI VerbHandlers calls 3 called by 1

Entity Profile

CoreAPI→ VerbHandlers→ rebuild_auth() — requests Function Reference

Dependency Diagram

graph TD
  18349e5e_3ab4_19be_23d5_20c1111b761b["rebuild_auth()"]
  29cd946c_8c0d_e37c_acb9_dfb2b83bf42b["SessionRedirectMixin"]
  18349e5e_3ab4_19be_23d5_20c1111b761b -->|defined in| 29cd946c_8c0d_e37c_acb9_dfb2b83bf42b
  cbf6862f_d124_817f_3342_f1142c276f25["resolve_redirects()"]
  cbf6862f_d124_817f_3342_f1142c276f25 -->|calls| 18349e5e_3ab4_19be_23d5_20c1111b761b
  878c62b1_e60f_77fd_3028_6c51dffaeedf["should_strip_auth()"]
  18349e5e_3ab4_19be_23d5_20c1111b761b -->|calls| 878c62b1_e60f_77fd_3028_6c51dffaeedf
  c7dd921b_c760_ae2b_9620_0ab18f3fcf42["get_netrc_auth()"]
  18349e5e_3ab4_19be_23d5_20c1111b761b -->|calls| c7dd921b_c760_ae2b_9620_0ab18f3fcf42
  bea876a9_383a_fe0e_3e83_080ef6697c9f["prepare_auth()"]
  18349e5e_3ab4_19be_23d5_20c1111b761b -->|calls| bea876a9_383a_fe0e_3e83_080ef6697c9f
  style 18349e5e_3ab4_19be_23d5_20c1111b761b fill:#6366f1,stroke:#818cf8,color:#fff

Relationship Graph

Source Code

src/requests/sessions.py lines 283–301

    def rebuild_auth(self, prepared_request, response):
        """When being redirected we may want to strip authentication from the
        request to avoid leaking credentials. This method intelligently removes
        and reapplies authentication where possible to avoid credential loss.
        """
        headers = prepared_request.headers
        url = prepared_request.url

        if "Authorization" in headers and self.should_strip_auth(
            response.request.url, url
        ):
            # If we get redirected to a new host, we should strip out any
            # authentication headers.
            del headers["Authorization"]

        # .netrc might have more auth for us on our new host.
        new_auth = get_netrc_auth(url) if self.trust_env else None
        if new_auth is not None:
            prepared_request.prepare_auth(new_auth)