httpx Authentication flows should preserve history. (Fix)

The Fix

Upgrade to version 0.13.0 or later.

Based on closed encode/httpx issue #669 · PR/commit linked

Open PR/Commit

@@ -451,7 +451,7 @@ async def send_handling_redirects(
 
             response = await self.send_handling_auth(
-                request, auth=auth, timeout=timeout,
+                request, history, auth=auth, timeout=timeout,
             )

fix.md

Option A — Upgrade to fixed release\nUpgrade to version 0.13.0 or later.\nWhen NOT to use: This fix should not be used if the request history is not needed for authentication.\n\n

Why This Fix Works in Production

Trigger: Users could not see the history of requests made during authentication flows.
Mechanism: Records the history of requests made during authentication, ensuring that prior requests are visible in response.history.
Why the fix works: Records the history of requests made during authentication, ensuring that prior requests are visible in response.history. (first fixed release: 0.13.0).

Why This Breaks in Prod

Production symptom (often without a traceback): Users could not see the history of requests made during authentication flows.

Proof / Evidence

GitHub issue: #669
Fix PR: https://github.com/encode/httpx/pull/718
First fixed release: 0.13.0
Reproduced locally: No (not executed)
Last verified: 2026-02-09
Confidence: 0.85
Did this fix it?: Yes (upstream fix exists)
Own content ratio: 0.73

Discussion

High-signal excerpts from the issue thread (symptoms, repros, edge-cases).

Jump to Sources Open on GitHub

“Will need to make sure that the ordering is consistent with the ordering in redirects. (I don't recall if it is "first in the list…”

@lovelydinosaur · 2019-12-21 · source

Failure Signature (Search String)

Users could not see the history of requests made during authentication flows.

Copy-friendly signature

signature.txt

Failure Signature
-----------------
Users could not see the history of requests made during authentication flows.

Error Message

Signature-only (no traceback captured)

error.txt

Error Message
-------------
Users could not see the history of requests made during authentication flows.

What Broke

Users could not see the history of requests made during authentication flows.

Fix Options (Details)

Option A — Upgrade to fixed release Safe default (recommended)

Upgrade to version 0.13.0 or later.

When NOT to use: This fix should not be used if the request history is not needed for authentication.

Use when you can deploy the upstream fix. It is usually lower-risk than long-lived workarounds.

Fix reference: https://github.com/encode/httpx/pull/718

First fixed release: 0.13.0

Last verified: 2026-02-09. Validate in your environment.

When NOT to Use This Fix

This fix should not be used if the request history is not needed for authentication.

Did This Fix Work in Your Case?

Quick signal helps us prioritize which fixes to verify and improve.

Prevention

Add a CI check that diffs key outputs after upgrades (OpenAPI schema snapshots, JSON payload shapes, CLI output).
Upgrade behind a canary and run integration tests against the canary before 100% rollout.

Version Compatibility Table

Version	Status
0.13.0	Fixed

Related Issues

No related fixes found.

Cluster: httpx:auth All hubs All clusters

Related clusters: Configuration error Data consistency Other

Sources

We don’t republish the full GitHub discussion text. Use the links above for context.