python312Packages.rauth: drop

[Sigmanificient]

Description of changes

part of:

• python3Packages: get rid of uses of nose #326513

Things done

• Built on platform(s)
  • x86_64-linux
  • aarch64-linux
  • x86_64-darwin
  • aarch64-darwin
• For non-Linux: Is sandboxing enabled in nix.conf? (See Nix manual)
  • sandbox = relaxed
  • sandbox = true
• Tested, as applicable:
  • NixOS test(s) (look inside nixos/tests)
  • and/or package tests
  • or, for functions and "core" functionality, tests in lib/tests or pkgs/test
  • made sure NixOS tests are linked to the relevant packages
• Tested compilation of all packages that depend on this change using nix-shell -p nixpkgs-review --run "nixpkgs-review rev HEAD". Note: all changes have to be committed, also see nixpkgs-review usage
• Tested basic functionality of all binary files (usually in ./result/bin/)
• 24.11 Release Notes (or backporting 23.11 and 24.05 Release notes)
  • (Package updates) Added a release notes entry if the change is major or breaking
  • (Module updates) Added a release notes entry if the change is significant
  • (Module addition) Added a release notes entry if adding a new NixOS module
• Fits CONTRIBUTING.md.

---

Add a 👍 reaction to pull requests you find important.

[emilazy]

I’m inclined to drop this; no in‐tree users, and “OAuth library that hasn’t been updated in a decade” is a very scary sequence of words. OAuth is security-critical and tricky, and there have certainly been OAuth best practices established in the past decade since this was touched at all. I suspect the only reason there isn’t an obvious knownVulnerabilities we can slap on this is because, with only 29 reverse dependencies on PyPI, it’s not widely used enough to have gotten attention from security researchers.

[Sigmanificient]

"OAuth library that hasn’t been updated in a decade"

...yeah that is indeed quite scary 😅

[emilazy]

LGTM. Please update the commit and PR titles.