Getting 403 forbidden from TestPypi

[faggionluca]

Hello i've setup the github action for uploading to the TestPypi index but it keep getting 403 forbidden
The credential on TestPypi are enabled because running on local the command python -m twine upload --repository testpypi dist/* the package get uploaded and also work by passing the plain token on the yaml file of the github action but not when passing the secret from github

this is my yaml file content:

- name: Publish distribution 📦 to Test PyPI
  uses: pypa/gh-action-pypi-publish@master
  with:
    password: ${{ secrets.PYPI_TEST_TOKEN }}
    repository_url: https://test.pypi.org/legacy/

this is the runner log:

Uploading distributions to https://upload.pypi.org/legacy/
Uploading sphinx_uedoc_theme-0.1.dev1+gb6996e3-py3-none-any.whl

  0%|          | 0.00/5.76k [00:00<?, ?B/s]
100%|██████████| 5.76k/5.76k [00:00<00:00, 50.2kB/s]
NOTE: Try --verbose to see response content.
HTTPError: 403 Forbidden from https://upload.pypi.org/legacy/
Invalid or non-existent authentication information. See https://pypi.org/help/#invalid-auth for more information.

and i checked that the token was not empty

Run echo ${#TEST_GITHUB_TOKEN}
  echo ${#TEST_GITHUB_TOKEN}
  shell: /bin/bash -e {0}
  env:
    pythonLocation: /opt/hostedtoolcache/Python/3.8.5/x64
    TEST_GITHUB_TOKEN: ***

[webknjaz]

Uploading sphinx_uedoc_theme-0.1.dev1+gb6996e3-py3-none-any.whl

This has a local version part. PyPI (and TestPyPI for that matter) are incompatible with it.

You should probably set local_scheme = no-local-version in your setuptools-scm setup for such uploads so that it'd be sphinx_uedoc_theme-0.1.dev1-py3-none-any.whl (without that +gb6996e3 part).

[faggionluca]

just tested with "no-local-version" but still got 403
tested also with this setup

def local_version(version):
    return str(math.floor(time.time()))
.....
setuptools.setup( ....
    use_scm_version={"root": ".", "relative_to": __file__,
                        "local_scheme": local_version},
...)

which result in a file name like sphinx_uedoc_theme-0.1.dev781597224571-py3-none-any (it upload fine with twine)
but still got 403

" "https://test.pypi.org/legacy/" "dist" "true" "false"
Checking dist/sphinx_uedoc_theme-0.1.dev11597224405-py3-none-any.whl: PASSED
Checking dist/sphinx-uedoc-theme-0.1.dev11597224405.tar.gz: PASSED
HTTPError: 403 Forbidden from https://test.pypi.org/legacy/
Invalid or non-existent authentication information. See https://test.pypi.org/help/#invalid-auth for more information.
Uploading distributions to https://test.pypi.org/legacy/
Uploading sphinx_uedoc_theme-0.1.dev11597224405-py3-none-any.whl

  0%|          | 0.00/5.78k [00:00<?, ?B/s]
100%|██████████| 5.78k/5.78k [00:00<00:00, 22.3kB/s]
NOTE: Try --verbose to see response content.

[webknjaz]

Also, since this is 403, make sure that (1) your secret name is correct, (2) you didn't accidentally copy extra trailing spaces that would break the value.

I think the easiest way to fix this is to just edit the token and when pasting, check if it looks okay...

[webknjaz]

Is your workflow public? I could take a look if it is... Does it emit any warnings on the workflow page?

FWIW this action runs twine upload: https://github.com/pypa/gh-action-pypi-publish/blob/1862321/twine-upload.sh#L47. And if something is wrong with the password, it'd behave exactly like this...

[faggionluca]

i feel stupid i checked 3 times for trailing spaces but there was one

Run echo ${#TEST_GITHUB_TOKEN}
  echo ${#TEST_GITHUB_TOKEN}
  shell: /bin/bash -e {0}
  env:
    pythonLocation: /opt/hostedtoolcache/Python/3.8.5/x64
    TEST_GITHUB_TOKEN: ***
179

before was 180
its now uploading fine
Thank you for the help