Mirror of forum.nim-lang.org

14004 :: requests - a browser-impersonating HTTP client (TLS JA3/JA4 + HTTP/2 & HTTP/3 fingerprint-matched)

[2026-06-27T02:04:33+02:00]

timbuktu (orginal) [2026-06-27T02:04:33+02:00] view original
requests — an HTTP client for Nim whose outbound traffic is

byte-indistinguishable from a real browser at the TLS (JA3/JA4), HTTP/2 (Akamai) and HTTP/3 layers. It binds to curl-impersonate (BoringSSL), so the ClientHello, extension ordering, GREASE, key-share and H2 SETTINGS match the real thing. Stock std/httpclient gets flagged on the handshake; this doesn't.
```
import requests

let s = newSession("chrome136")
let r = s.get("https://example.com")
echo r.status, " HTTP/", r.httpVersionStr, " ", r.body.len, "b"

s.close()
```
- Real browser fingerprints (TLS, HTTP/2, HTTP/3)
- Persistent sessions with connection reuse, cookies, and TLS resumption
- Typed cookie API with import/export for login persistence
- HTTP/3 (QUIC) with automatic Alt-Svc upgrades
- Thread-safe shared state (cookies, DNS, TLS sessions, connections)
- Multipart uploads, streaming downloads, concurrent fetchAll, JSON/form helpers, and a header/profile coherence linter
For most use cases, only JavaScript/WASM challenges and IP reputation remain.

github.com/thing-king/requests