Python SSPI Library

This library provides Python functions that wraps the Windows SSPI API. It is designed to be both a high and low level interface that other libraries can easily leverage to use with SSPI integration. The high level interface is under the sspilib namespace whereas the low-level interface is under the sspilib.raw interface.

Requirements

Python 3.10+

More requirements are needed to compile the code from scratch but this library is shipped as a wheel so it isn't mandatory for installation.

Installation

Simply run:

pip install sspilib

To install from source run the following:

git clone https://github.com/jborean93/sspilib.git
python -m pip install build
python -m build
pip install dist/sspilib-*.whl

Development

To run the tests or make changes to this repo run the following:

git clone https://github.com/jborean93/sspilib.git
pip install -r requirements-dev.txt
pre-commit install

python -m pip install -e .

# Can compile the sspi extensions on an adhoc basis
# python setup.py build_ext --inplace

From there an editor like VSCode can be used to make changes and run the test suite. To recompile the Cython files after a change run the build_ext --inplace command.

If building on Linux or macOS, a version of libsspi from sspi-rs must be compiled with rust. A copy of libicuuc alongside its headers must be present during compile time. To compile sspi-rs, download the git repository and run the following.

cargo build \
    --package sspi-ffi \
    --release

export LD_LIBRARY_PATH="${PWD}/target/release"
export LIBRARY_PATH="${PWD}/target/release"

Structure

This library is merely a wrapper around the SSPI APIs. The high level API under sspilib exposes an easier to use Python API for SSPI. The functions under the sspilib.raw namespace expose the various SSPI functions under a more Pythonic snake_case format. For example the AcquireCredentialsHandle function is exposed as sspilib.raw.acquire_credentials_handle.

Errors are raised as a WindowsError which contains the error message as formatted by Windows and the error code. For non-Windows hosts there is a compatible sspilib.WindowsError class that is structured like the Windows only WindowsError builtin. Some of the objects and constants are exposed as Python classes/dataclasses/enums for ease of use. Please read through the docstring of the function that will be used to learn more about how to use them.

Client Authentication Example

Here is a basic example of how to use this library for client authentication:

import sspilib

cred = sspilib.UserCredential(
    "username@DOMAIN.COM",
    "password",
)

ctx = sspilib.ClientSecurityContext(
    credential=cred,
    target_name="host/server.domain.com",
)

in_token = None
while not ctx.complete:
    out_token = ctx.step(in_token)
    if not out_token:
        break

    # exchange_with_server() is a function that sends the out_token to the
    # server we are authenticating with. How this works depends on the app
    # protocol being used, e.g. HTTP, sockets, LDAP, etc.
    in_token = exchange_with_server(out_token)

# Once authenticated we can wrap messages when talking to the server. The final
# message being sent is dependent on the application protocol
secret = b"secret data"

wrapped_secret = ctx.wrap(secret)
server_enc_resp = exchange_with_server(wrapped_secret)
server_resp = ctx.unwrap(server_enc_resp).data

The UserCredential supports more options, like selecting the authentication protocol used. The ClientSecurityContext requires the credentials to use and the Service Principal Name (SPN) of the target server. Other options can be used to control the context requested attributes, channel bindings, etc as needed. How the tokens and wrapped data is sent is dependent on the underlying protocols used, this example just shows when to exchange the data.

Non-Windows Support

While SSPI is a Windows only API, this package ships with manylinux2014_x86_64, macosx_x86_64, and macosx_arm64 compatible wheels that use sspi-rs. Support for this is experimental as all the authentication logic is contained in that external API. The interface for sspi-rs is exactly the same as SSPI on Windows so the same code should theoretically be possible. In saying this, compatibility with SSPI actual is not 100% there so use at your own risk.

It is recommended to use a library that wraps GSSAPI on non-Windows platforms like python-gssapi. There is no support for any other architectures on Linux except x86_64 and aarch64 (ARM64), and as sspi-rs only supports glibc it cannot be used with musl based distributions like Alpine.

Python Free-Threading (PEP 779)

This library supports Python Free-Threading and will build free-threading-compatible extension files if installed under a free-threading interpreter. Python 3.14t is tested in CI and a wheel will be created for 3.14t+. Python 3.13t is not officially tested or supported but may or may not work. There is limited testing for free-threading in this library and it does not aim to be thread safe out of the box. If you encounter any issues or problems with this scenario please raise an issue and we can look at possible options to fix this.

Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sspilib-0.6.0.tar.gz (60.0 kB view details)

Uploaded Aug 24, 2026 Source

Built Distributions

If you're not sure about the file name format, learn more about wheel file names.

The dropdown lists show the available interpreters, ABIs, and platforms. Enable javascript to be able to filter the list of wheel files.

sspilib-0.6.0-cp315-cp315t-win_arm64.whl (555.7 kB view details)

Uploaded Aug 24, 2026 CPython 3.15tWindows ARM64

sspilib-0.6.0-cp315-cp315t-win_amd64.whl (707.5 kB view details)

Uploaded Aug 24, 2026 CPython 3.15tWindows x86-64

sspilib-0.6.0-cp315-cp315t-win32.whl (589.5 kB view details)

Uploaded Aug 24, 2026 CPython 3.15tWindows x86

sspilib-0.6.0-cp315-cp315t-manylinux_2_28_x86_64.whl (11.2 MB view details)

Uploaded Aug 24, 2026 CPython 3.15tmanylinux: glibc 2.28+ x86-64

sspilib-0.6.0-cp315-cp315t-manylinux_2_28_aarch64.whl (11.3 MB view details)

Uploaded Aug 24, 2026 CPython 3.15tmanylinux: glibc 2.28+ ARM64

sspilib-0.6.0-cp315-cp315t-macosx_11_0_arm64.whl (6.3 MB view details)

Uploaded Aug 24, 2026 CPython 3.15tmacOS 11.0+ ARM64

sspilib-0.6.0-cp315-cp315t-macosx_10_15_x86_64.whl (6.8 MB view details)

Uploaded Aug 24, 2026 CPython 3.15tmacOS 10.15+ x86-64

sspilib-0.6.0-cp314-cp314t-win_arm64.whl (558.6 kB view details)

Uploaded Aug 24, 2026 CPython 3.14tWindows ARM64

sspilib-0.6.0-cp314-cp314t-win_amd64.whl (713.7 kB view details)

Uploaded Aug 24, 2026 CPython 3.14tWindows x86-64

sspilib-0.6.0-cp314-cp314t-win32.whl (592.3 kB view details)

Uploaded Aug 24, 2026 CPython 3.14tWindows x86

sspilib-0.6.0-cp314-cp314t-manylinux_2_28_x86_64.whl (11.2 MB view details)

Uploaded Aug 24, 2026 CPython 3.14tmanylinux: glibc 2.28+ x86-64

sspilib-0.6.0-cp314-cp314t-manylinux_2_28_aarch64.whl (11.3 MB view details)

Uploaded Aug 24, 2026 CPython 3.14tmanylinux: glibc 2.28+ ARM64

sspilib-0.6.0-cp314-cp314t-macosx_11_0_arm64.whl (6.3 MB view details)

Uploaded Aug 24, 2026 CPython 3.14tmacOS 11.0+ ARM64

sspilib-0.6.0-cp314-cp314t-macosx_10_15_x86_64.whl (6.8 MB view details)

Uploaded Aug 24, 2026 CPython 3.14tmacOS 10.15+ x86-64

sspilib-0.6.0-cp311-abi3-win_arm64.whl (484.4 kB view details)

Uploaded Aug 24, 2026 CPython 3.11+Windows ARM64

sspilib-0.6.0-cp311-abi3-win_amd64.whl (557.4 kB view details)

Uploaded Aug 24, 2026 CPython 3.11+Windows x86-64

sspilib-0.6.0-cp311-abi3-win32.whl (473.1 kB view details)

Uploaded Aug 24, 2026 CPython 3.11+Windows x86

sspilib-0.6.0-cp311-abi3-manylinux_2_28_x86_64.whl (10.4 MB view details)

Uploaded Aug 24, 2026 CPython 3.11+manylinux: glibc 2.28+ x86-64

sspilib-0.6.0-cp311-abi3-manylinux_2_28_aarch64.whl (10.4 MB view details)

Uploaded Aug 24, 2026 CPython 3.11+manylinux: glibc 2.28+ ARM64

sspilib-0.6.0-cp311-abi3-macosx_11_0_arm64.whl (6.2 MB view details)

Uploaded Aug 24, 2026 CPython 3.11+macOS 11.0+ ARM64

sspilib-0.6.0-cp311-abi3-macosx_10_12_x86_64.whl (6.7 MB view details)

Uploaded Aug 24, 2026 CPython 3.11+macOS 10.12+ x86-64

sspilib-0.6.0-cp310-cp310-win_arm64.whl (514.3 kB view details)

Uploaded Aug 24, 2026 CPython 3.10Windows ARM64

sspilib-0.6.0-cp310-cp310-win_amd64.whl (594.7 kB view details)

Uploaded Aug 24, 2026 CPython 3.10Windows x86-64

sspilib-0.6.0-cp310-cp310-win32.whl (504.4 kB view details)

Uploaded Aug 24, 2026 CPython 3.10Windows x86

sspilib-0.6.0-cp310-cp310-manylinux_2_28_x86_64.whl (11.0 MB view details)

Uploaded Aug 24, 2026 CPython 3.10manylinux: glibc 2.28+ x86-64

sspilib-0.6.0-cp310-cp310-manylinux_2_28_aarch64.whl (11.0 MB view details)

Uploaded Aug 24, 2026 CPython 3.10manylinux: glibc 2.28+ ARM64

sspilib-0.6.0-cp310-cp310-macosx_11_0_arm64.whl (6.2 MB view details)

Uploaded Aug 24, 2026 CPython 3.10macOS 11.0+ ARM64

sspilib-0.6.0-cp310-cp310-macosx_10_12_x86_64.whl (6.8 MB view details)

Uploaded Aug 24, 2026 CPython 3.10macOS 10.12+ x86-64

File details

Details for the file sspilib-0.6.0.tar.gz.

File metadata

Download URL: sspilib-0.6.0.tar.gz
Upload date: Aug 24, 2026
Size: 60.0 kB
Tags: Source
Uploaded using Trusted Publishing? Yes
Uploaded via: twine/7.0.0 CPython/3.13.14

File hashes

Hashes for sspilib-0.6.0.tar.gz
Algorithm	Hash digest
SHA256	`b4d4e3402230f14cd93999f3953619163075bcaca3e13dcf2ab5942c269627f4`
MD5	`e1a28c0e10c66659cb81ac5d6a81db6a`
BLAKE2b-256	`0d70946df678028019b3bbdd6e4fa1fb46f7ccdf46fab1b807813e79aff30e84`

Algorithm	Hash digest
SHA256	`97bb2e9d4d916d4d6f566888a81997bb3ab0e05ac41549fa0fbebabac66de0e8`
MD5	`3a0e8326da666ecbc7e1db78e084bb1b`
BLAKE2b-256	`829d26db0d0998bf4b20bc14809e30c20845b9ef34eb6114e9fe39541c7ee0a8`

Algorithm	Hash digest
SHA256	`071e4e2a617a39a33e31de2c1f313427533879acabe475fedea31f129f7970bb`
MD5	`e6929f0e605d93bbed8d1a91c2e2be46`
BLAKE2b-256	`d04f1d3c64284faf9fa9b7d5ec2b4b9152cbcd59d0bf260883bd485be5d58551`

Algorithm	Hash digest
SHA256	`03335e14f8563e350506b47a15887a99f08102a80cfb6bd715ad83ab1c2c89ae`
MD5	`d6a750e19387a638a5fffefa05a9877d`
BLAKE2b-256	`89b268ae0e965f0d4ad6cab30291adb490d73a5a898735452b3c99158d98bfbb`

Algorithm	Hash digest
SHA256	`73343ba40b04de0486ab92f60b729eb0768657f71e4c279555d3273f323c0ce4`
MD5	`6885bbedf557f5d7c479d1791e06b21c`
BLAKE2b-256	`cd4986f537d48060a8c617b647fd4f6333ad6a80b641ffbbbc7357a2c69c2665`

Algorithm	Hash digest
SHA256	`be2b500e7b745569794e8cfa557510f6c18e5402ad8f1fa1abe7adf53b3f3964`
MD5	`3a8f4f347f9a52ca45a1e6a407121303`
BLAKE2b-256	`5ad0d7b2ca32f5b4047549c397bfc986ab2400817f1d817e1675280e1e9e7d6e`

Algorithm	Hash digest
SHA256	`6ad61668c4eea0fdeefd1f596c4fb7b3f45237b1a5989c12d4412729bded7231`
MD5	`1064881376063f2eb470184286206b6e`
BLAKE2b-256	`6be9f0e69f00f7962637ad54d55bae23084f26768884063fbaa779b28c1bea25`

Algorithm	Hash digest
SHA256	`76a289f415f9beb6a2f3f0cb37b655863616c303b2a06754e1bb84ad86348aab`
MD5	`f29f8930b78b44223bc78069972fdd6c`
BLAKE2b-256	`3c7f6be3c69d44bd030e4ad4b9166b3503c1030372383cc62d77e915cef9b09d`

Algorithm	Hash digest
SHA256	`7ea194eeb68d8848fde7125a7ac67fbd4a9052442b7ce69ce6c0c8115227ec67`
MD5	`20e70638f208936eda3fb214bdac486a`
BLAKE2b-256	`fc12afd3c28e75a863aa2f29b40887570ebc91b12407818f2812d366b7fce1c2`

Algorithm	Hash digest
SHA256	`5937dbe41c34cbbfabbafb84238a06aa8912210cae8a4b909fa20f965868cc89`
MD5	`e67e8fe62b3735725414e9a670a7ddb3`
BLAKE2b-256	`82bc77c0ec2fee5d94446d245b2ce1dba2f6f2dcfecef20be8d362d2b9bc6a5f`

Algorithm	Hash digest
SHA256	`0482631c67a57d8710ecbba3bbe49a9fb60e153dfcfee6d1f9b8a8ff6e419548`
MD5	`d3a99773f100478c847cb18eeb543f7b`
BLAKE2b-256	`f61d679cee04cca4244d2a829686df201662618c2e87c6a19390861b04ffd9ee`

Algorithm	Hash digest
SHA256	`fe8c7c9f749ffd302336a7820889ad9189c237d1f6d24e1232d7e2c653433d5b`
MD5	`bd833c8a644bb2c53d6b69d6edd014d5`
BLAKE2b-256	`454e90dba10a828311fb7232e1916d132ba2ebd4ec79f41f58310cc3766751be`

Algorithm	Hash digest
SHA256	`8b4b911f59f03601c23357146814e784c9a7612f34f5b933bdb1c50591b173d0`
MD5	`c5bd00d1c809d6eb9ee5fc901974bcce`
BLAKE2b-256	`490cd6baf3003df4b9f61ea4a71eca68b47ec00645686d9db938df5a715850f1`

Algorithm	Hash digest
SHA256	`83f99ed351d3091434f182579d20a419fa7baf03ec154632b5f7f3fbc6aa0788`
MD5	`4bb6fcf5a7a7b52f97c57f34a38c7788`
BLAKE2b-256	`bf3dfb885a0160d9c07fb2bc313d392bdd43e8e8436605da8e215fa515d5eee9`

Algorithm	Hash digest
SHA256	`05883cd90cb2c67f18fd2418ab0f959549fbe6a9a4fc8013679411af23226d6e`
MD5	`2764821d7ffecb55a060f92dc9e6e5d4`
BLAKE2b-256	`3d75da0ed7428c0d79e667fa0291ee5895604f57b1dc819486500f5b69c5a7cd`

Algorithm	Hash digest
SHA256	`9073afb8f30dc0e7f3a40b39fef0fc29e4bda6a3d4e77936f3c496cedc4beade`
MD5	`ccf612d9ee30313db6ec360032e83e9b`
BLAKE2b-256	`03e5a0aacae71a731a7575e2412b43549214b3fae898a8358a3d63b7c805aa42`

Algorithm	Hash digest
SHA256	`b841fabe630101d9e2be6ba56407a2a539087ee85d6ca1477748c21135c9f636`
MD5	`12d59534de572736bc2e7520d0192ecd`
BLAKE2b-256	`4f072519c128aad9c4062aa46bb8d584e01f8154d119e0a09191258da5935788`

Algorithm	Hash digest
SHA256	`70223bdfefde9656c48dd17bb58fd0fb7e879e5b08ab028267d585206f393886`
MD5	`2794ef386f6b500cd71e90045cd09249`
BLAKE2b-256	`6b89d54087115dd1bdeafaaaee610defdcb940ebc241e1e2e7c52ec323e077bc`

Algorithm	Hash digest
SHA256	`737adc3b14c2079480bcd10139fbab0b2ad683a24a6046ef69d9c769f4672c0a`
MD5	`633f4f598afaabeea514f831619f9cfa`
BLAKE2b-256	`93295d4b9b53c982394d5e81a54d2818ca37478b2d68822a86aede3b4284bf86`

Algorithm	Hash digest
SHA256	`b65fa6f90e523daa6eb95c0aa707cd6c04705bdfab3e42c00723d23141bc74ad`
MD5	`8f09b359494003c987489706c28cbabb`
BLAKE2b-256	`0fcda51bc36af754d67ed425259a4b7dde69f0867245ff8e0209b96e1d3be90d`

Algorithm	Hash digest
SHA256	`b79f8088f8e2826586e5eb14b68f03f443637df178e95c190765c8065fc57a37`
MD5	`c42509f117c9655db0446a90c6ca00a6`
BLAKE2b-256	`9e4bd0f8ebd058ff3e241fef762884419f27cdb2e1597b45ebd87061790813db`

sspilib 0.6.0

Python SSPI Library

Requirements

Installation

Development

Structure

Client Authentication Example

Non-Windows Support

Python Free-Threading (PEP 779)

Project links

Key dates

3 maintainers

Credits

GitHub Statistics

License expression

Requires

Tags

Classifiers

Download files

Source Distribution

Built Distributions

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Provenance

File details

File metadata

File hashes

Algorithm	Hash digest
SHA256	`d239d78f9619d4fc76a9d57eb929258de50024c56097e73737d46ad58be0acaa`
MD5	`a71a3572420bdce399e2c1a822a58c8b`
BLAKE2b-256	`ebb0cf45f078d7b9f0a28d7bb247f9db31942d8b81674bb3aaa475e10c8d2623`

Algorithm	Hash digest
SHA256	`bf125782912e4a9012822619eb41e2c9c0e32cb9148efb649e608804b4b4e313`
MD5	`1d363accbfc20668d35b3ff83acb86a9`
BLAKE2b-256	`2b101904ed94372821df299378d34da3c8f5b2224d8cafcf4cc23ed95566432d`

Algorithm	Hash digest
SHA256	`8957c47c6d4e145a9e111a4c2a2b357ea15cb69719ff99fc0088fbd612618226`
MD5	`77dae25834753e5c60bf8e9ef9661cc1`
BLAKE2b-256	`a7952a3ccdd1aad2309284a9c567a8c8cd05acdc90661f98f71189ef87f6a61d`

Algorithm	Hash digest
SHA256	`3b24b6c19657f7b8b74a92e6cadb3ae5e25602ee348a7142cebb5194a0eed01b`
MD5	`6f779cfdc001bfbc2d65d307995a2e80`
BLAKE2b-256	`dec73fa4599db3cdeea4ba4286e98213afc0588b9df0b8f7d6f7fd41749322c8`

Algorithm	Hash digest
SHA256	`68a34e702fd81de3d74ea8caf6bc6a1218af551b75d0573a3b0607124a54e5f2`
MD5	`74a10d9c47fc721deab36d8d8c39f4f8`
BLAKE2b-256	`8bde33de8d74f5eb44fadded0c3006bc660675aff5701173956685db4c13632a`

Algorithm	Hash digest
SHA256	`cbc8cf653e71b32ab7cf11d1630866cf12133fb235422f3f9bccb60ba62290e4`
MD5	`10f273dc93cb55cbde38bdc3545f5e9e`
BLAKE2b-256	`2667cb9b8187d66cd72e94030b14b5688d06752ebb41bfdb09b618653e5224a9`

Algorithm	Hash digest
SHA256	`aa97562ca3d27a0ba5c830c56bff0fb6d3c8257bd16589b63869a212de6c92bd`
MD5	`b6297c34127cbc9a5226d8767c97ff02`
BLAKE2b-256	`59a1174248452b3ebb03e9914b16594c1e5720a7e3ded582bce64f7a77ede92b`

Algorithm	Hash digest
SHA256	`2758aac58b6ca0aa5b726bdc76cea7d020820ac9831f4082b5b6fceda2cb48d0`
MD5	`7be5d05981d9e2da4bf11c809a387c3c`
BLAKE2b-256	`7134999125e04edd8b570b4158fac31b9c3945c953a127fa30f96b339eb0137b`