Switch from requests-kerberos to requests-gssapi

[pdecat]

This PR switches aws-adfs from the unmaintained requests-kerberos to the actively maintained requests-gssapi.

This should resolve issues with pykerberos which is a dependency of requests-kerberos #189. Edit: #189 is about using the macOS provided version of python which is buggy.

Some people looked into switching requests-kerberos from the unmaintained pykerberos to the maintained kerberos,
but the last comment seems to indicate it is probably easier to switch from requests-kerberos to requests-gssapi.

requests GSSAPI authentication library

Requests is an HTTP library, written in Python, for human beings. This library adds optional GSSAPI authentication support and supports mutual authentication.

It provides a fully backward-compatible shim for the old python-requests-kerberos library: simply replace import requests_kerberos with import requests_gssapi.

See https://pypi.org/project/requests-gssapi/
and https://github.com/pythongssapi/requests-gssapi

[pdecat]

Hi @bodgit, as the author of #144, would you be able to verify this PR does not break your use case with Kerberos support?

[bodgit]

Hi @bodgit, as the author of #144, would you be able to verify this PR does not break your use case with Kerberos support?

We've actually almost entirely migrated away from ADFS to use Okta instead and switched from this package to gimme-aws-creds to generate AWS credentials, so I don't use this now. Feel free to merge!

[pdecat]

@bodgit ok, thanks for the feedback.

[pdecat]

requests-kerberos v0.13.0 was recently released and switched its Kerberos dependencies:

Change Kerberos dependencies to pyspnego to modernise the underlying Kerberos library that is used.

See https://github.com/requests/requests-kerberos/releases/tag/v0.13.0
and requests/requests-kerberos#163