suggest using API token when uploading to PyPI

[brainwane]

Hi! In the documentation perhaps you could change

username:maurits
password:secret

to instead suggest people use an API token for PyPI uploads?

Thanks!

[mauritsvanrees]

I am not using API tokens myself yet, so I am not ready to recommend it. I do want to try it though. Thanks for pointing it out. I'll keep this issue open.

[reinout]

I tried it out in one project: works like a charm.

[icemac]

I am using a singe API token for all my projects. It works like a charm but it does not provide much more security than using the password.
It would be interesting to have support for different API tokens for different projects.

[brainwane]

PyPI does support using different tokens for different projects; I presume you mean that you would like for zest.releaser to make it easier for you to use per-project tokens?

[Behoston]

Why change, API tokens works exactly same way that user and password works. It's up to you: you can use token or credentials, official documentation is linked, you should use it for pypi configuration.