PyPI now supports scoped access tokens, we should grow support for this as appropriate: https://discuss.python.org/t/pypi-security-work-multifactor-auth-progress-help-needed/1042/31
@sigmavirus24 This should "just work" without any changes to twine by using __token__ as the username and the token as the password. What additional support do you think twine needs here?
Ah, I hadn't gotten around to reading the link. I see that it should continue working. I was thinking we might need to add support for retrieving the token on behalf of users.
by using @token as the username and the token as the password
Is this documented somewhere? The only thing I could find is this issue :D
On https://pypi.org/manage/account/token/ it says the username is supposed to be __token__ btw.
@almarklein Yep, we changed it not long after the launch -- I'll edit that comment.
This is also documented here: https://pypi.org/help/#apitoken
It doesn't seem to work though.
@soerendip Please file a new issue w/ all details and we'll try to help.
Most helpful comment
This is also documented here: https://pypi.org/help/#apitoken