Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[TODO] Switch to using tokens for uploading to PyPI #3941

Closed
webknjaz opened this issue Jul 25, 2019 · 3 comments
Closed

[TODO] Switch to using tokens for uploading to PyPI #3941

webknjaz opened this issue Jul 25, 2019 · 3 comments
Assignees
Labels

Comments

@webknjaz
Copy link
Member

webknjaz commented Jul 25, 2019

Long story short

It is now possible to create an API token at https://pypi.org/manage/account/token/. CI autoreleases should switch to that.

Use __token__ for a username and the token itself for a password when using Twine: pypi/warehouse#994 (comment)

Ref: https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/31

Expected behaviour

auth token is used for dist upload

Actual behaviour

user password is used for dist upload

Steps to reproduce

N/A

Your environment

N/A

@webknjaz

This comment has been minimized.

@webknjaz webknjaz self-assigned this Sep 9, 2019
webknjaz added a commit that referenced this issue Sep 9, 2019
webknjaz added a commit that referenced this issue Sep 9, 2019
@asvetlov
Copy link
Member

Nice! Could you update appveyor config as well?

@webknjaz
Copy link
Member Author

Oh, completely forgot about that.

@webknjaz webknjaz reopened this Sep 10, 2019
webknjaz added a commit that referenced this issue Sep 10, 2019
webknjaz added a commit that referenced this issue Sep 10, 2019
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

2 participants