How to publish to private CodeArtifact using Poetry: 401 error

[ferreira68]

I am trying to deploy to our CodeArtifact repository from a GitHub workflow. I don't want to go the twine route and would like to stick with poetry. Here's an excerpt from my workflow .yml file:

      - name: Configure AWS credentials
        uses: aws-actions/configure-aws-credentials@v1
        with:
          aws-access-key-id: ${{ secrets.DEV_AWS_ACCESS_KEY_ID }}
          aws-secret-access-key: ${{ secrets.DEV_AWS_SECRET_ACCESS_KEY }}
          aws-region: ${{ secrets.AWS_DEFAULT_REGION }}

      - name: Publish with Poetry
        run: |
          aws codeartifact login --domain ${{ secrets.AWS_CODEARTIFACT_DOMAIN }} --repository ${{ secrets.AWS_CODEARTIFACT_REPOSITORY }} --tool pip
          export POETRY_HTTP_BASIC_PUBLISH_USERNAME=aws
          export POETRY_HTTP_BASIC_PUBLISH_PASSWORD=$(aws codeartifact get-authorization-token --domain ${{ secrets.AWS_CODEARTIFACT_DOMAIN }} --domain-owner ${{ secrets.AWS_CODEARTIFACT_ACCOUNT_ID }} --query authorizationToken --output text)
          export POETRY_REPOSITORIES_PUBLISH_URL=$(aws codeartifact get-repository-endpoint --domain ${{ secrets.AWS_CODEARTIFACT_DOMAIN }} --domain-owner ${{ secrets.AWS_CODEARTIFACT_ACCOUNT_ID }} --repository ${{ secrets.AWS_CODEARTIFACT_REPOSITORY }} --format pypi --query repositoryEndpoint --output text)
          # poetry config repositories.publish $POETRY_REPOSITORIES_PUBLISH_URL
          poetry publish --build -r PUBLISH

Everything runs fine up until the poetry publish command, which returns the following:

HTTP Error 401: Unauthorized | b'Unauthenticated: request did not include an Authorization header. Please provide your credentials.'
Error: Process completed with exit code 1.

I am confused by this as I thought the three environment variables would provide the necessary credentials. Any help would be appreciated.

[blamarao]

Hello @ferreira68

This worked for me:

export CODEARTIFACT_TOKEN=$(aws codeartifact get-authorization-token ...)
poetry config repositories.publish [your codeartifact url]
poetry config pypi-token.publish $CODEARTIFACT_TOKEN
poetry publish --build -r publish

[estyrke]

Apparently we now have to set pypi-token instead of basic auth credentials. @blamarao's approach works, but if you want to keep using environment variables, you can just rename POETRY_HTTP_BASIC_PUBLISH_PASSWORD to POETRY_PYPI_TOKEN_PUBLISH (and remove POETRY_HTTP_BASIC_PUBLISH_USERNAME)