search

zestsoftware / zest.releaser

Python software releasing made easy and repeatable
https://zestreleaser.readthedocs.io
GNU General Public License v2.0
198 stars 62 forks source link

suggest using API token when uploading to PyPI #343

Open brainwane opened 4 years ago

brainwane commented 4 years ago

Hi! In the documentation perhaps you could change

username:maurits password:secret

to instead suggest people use an API token for PyPI uploads?

Thanks!

mauritsvanrees commented 4 years ago

I am not using API tokens myself yet, so I am not ready to recommend it. I do want to try it though. Thanks for pointing it out. I'll keep this issue open.

reinout commented 4 years ago

I tried it out in one project: works like a charm.

icemac commented 4 years ago

I am using a singe API token for all my projects. It works like a charm but it does not provide much more security than using the password. It would be interesting to have support for different API tokens for different projects.

brainwane commented 4 years ago

PyPI does support using different tokens for different projects; I presume you mean that you would like for zest.releaser to make it easier for you to use per-project tokens?

Behoston commented 4 years ago

Why change, API tokens works exactly same way that user and password works. It's up to you: you can use token or credentials, official documentation is linked, you should use it for pypi configuration.