Open brainwane opened 4 years ago
I am not using API tokens myself yet, so I am not ready to recommend it. I do want to try it though. Thanks for pointing it out. I'll keep this issue open.
I tried it out in one project: works like a charm.
I am using a singe API token for all my projects. It works like a charm but it does not provide much more security than using the password. It would be interesting to have support for different API tokens for different projects.
PyPI does support using different tokens for different projects; I presume you mean that you would like for zest.releaser to make it easier for you to use per-project tokens?
Why change, API tokens works exactly same way that user and password works. It's up to you: you can use token or credentials, official documentation is linked, you should use it for pypi configuration.
Hi! In the documentation perhaps you could change
to instead suggest people use an API token for PyPI uploads?
Thanks!