🔒 python package authentication nonexistent

[fallow goblet]

I'm using github to deploy my python package but im having a publishing error telling me that my pypi token is non existent

[mild onyx]

@fallow goblet

Python help channel opened

Remember to:

• Ask your Python question, not if you can ask or if there's an expert who can help.
• Show a code sample as text (rather than a screenshot) and the error message, if you've got one.
• Explain what you expect to happen and what actually happens.

:warning: Do not pip install anything that isn't related to your question, especially if asked to over DMs.

Closes after a period of inactivity, or when you send !close.

[fallow goblet]

ERROR HTTPError: 403 Forbidden from https://upload.pypi.org/legacy/
Invalid or non-existent authentication information. See
https://pypi.org/help/#invalid-auth for more information.

[analog salmon]

did u get the pypi upload token and if so did u add it to the secrets section of repo settings for workflows?

[nova juniper]

1. Ensure that your API Token is valid and has not been revoked.
2. Ensure that your API Token is properly formatted and does not contain any trailing characters such as newlines.
3. Ensure that the username you are using is __token__.

Remember that PyPI and TestPyPI each require you to create an account, so your credentials may be different.

If you're using Windows and trying to paste your token in the Command Prompt or PowerShell, note that Ctrl-V and Shift+Insert won't work. Instead, you can use "Edit > Paste" from the window menu, or enable "Use Ctrl+Shift+C/V as Copy/Paste" in "Properties". This is a known issue with Python's getpass module.

[analog salmon]

why would username be __token__?

[nova juniper]

because you are parsing in an api token

(& that's what pypi wants you to do)

[analog salmon]

pypi just needs the token afaik no username

[nova juniper]

i copied that directly from pypi's docs

[analog salmon]

hmm

https://github.com/pypa/gh-action-pypi-publish the action itself needs only the token

[nova juniper]

i'm just saying what the docs say

[analog salmon]

fair

[fallow goblet]

where do i put the api token in github

i think i put it in the right place but i dont really know

[analog salmon]

are u using the same name in your action also?

[fallow goblet]

no

[fallow goblet]

am i suppose to change it to that?

[analog salmon]

yes

[fallow goblet]

one second

[analog salmon]

${{ secrets.BYFRON }}

[fallow goblet]

were do i put that exactly https://github.com/staraledreamer/byfron/blob/main/.github/workflows/python-publish.yml

[analog salmon]

    - name: Publish package
      uses: pypa/gh-action-pypi-publish@27b31702a0e7fc50959f5ad993c78deac1bdfc29
      with:
        password: ${{ secrets.BYFRON }}

user is not needed

[fallow goblet]

like this right

[analog salmon]

wrong identation

[fallow goblet]

correct right?

[analog salmon]

remove user: __token__

[fallow goblet]

ok

can i pay you for you to do it @analog salmon

[analog salmon]

!rule paid

[mild onyx]

Rules

9. Do not offer or ask for paid work of any kind.

[analog salmon]

is ur token a valid pypi token?

hmm the code is obfuscated dosent seem like a good sign

@marsh loom

[fallow goblet]

proprietary algorithms

[analog salmon]

with streaming across sockets?

eitherways just make sure u have the correct pypi token regarding ur package from pypi

[fallow goblet]

were do i put the token exactly? in actions right?

[analog salmon]

yep

action then repository secret

[mild onyx]

Python help channel closed

This help channel has been closed and it's no longer possible to send messages here. If your question wasn't answered, feel free to create a new post in #1035199133436354600. To maximize your chances of getting a response, check out this guide on asking good questions.