python-package-folder 1.2.1__tar.gz → 1.2.2__tar.gz

{python_package_folder-1.2.1 → python_package_folder-1.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-package-folder
-Version: 1.2.1
+Version: 1.2.2
 Summary: Python package to automatically package and build a folder, fetching all relevant dependencies.
 Project-URL: Repository, https://github.com/alelom/python-package-folder
 Author-email: Alessio Lombardi <work@alelom.com>
@@ -229,8 +229,8 @@ python-package-folder --project-root /path/to/project --src-dir /path/to/src --b
 1. **Build Verification**: Ensures distribution files exist in the `dist/` directory
 2. **File Filtering**: Automatically filters distribution files to only include those matching the current package name and version (prevents uploading old artifacts)
 3. **Credential Management**: 
-   - Prompts for credentials if not provided
-   - Uses `keyring` for secure storage (if available)
+   - Prompts for credentials if not provided via command-line arguments
+   - Credentials are not stored - you'll be prompted each time (unless provided via `--username` and `--password`)
    - Supports both username/password and API tokens
    - Auto-detects API tokens and uses `__token__` as username
 4. **Repository Configuration**: Configures the target repository (PyPI, TestPyPI, or Azure)
@@ -639,11 +639,22 @@ publisher.publish()
 
 ### Credential Storage
 
-The package uses the `keyring` library (if installed) to securely store credentials. Credentials are stored per repository and will be reused on subsequent runs.
+**Note**: The package does not store credentials by default. Credentials must be provided via command-line arguments (`--username` and `--password`) or will be prompted each time you run the publish command. This ensures credentials are not persisted and must be entered fresh each time.
 
-Install keyring for secure credential storage:
-```bash
-pip install keyring
+If you previously used an older version that stored credentials in keyring, you can clear them using:
+
+```python
+from python_package_folder import Publisher, Repository
+
+publisher = Publisher(repository=Repository.AZURE)
+publisher.clear_stored_credentials()
+```
+
+Or manually using Python:
+```python
+import keyring
+keyring.delete_password("python-package-folder-azure", "username")
+# Also delete the password if you know the username
 ```
 
 ## Command Line Options

{python_package_folder-1.2.1 → python_package_folder-1.2.2}/README.md

@@ -209,8 +209,8 @@ python-package-folder --project-root /path/to/project --src-dir /path/to/src --b
 1. **Build Verification**: Ensures distribution files exist in the `dist/` directory
 2. **File Filtering**: Automatically filters distribution files to only include those matching the current package name and version (prevents uploading old artifacts)
 3. **Credential Management**: 
-   - Prompts for credentials if not provided
-   - Uses `keyring` for secure storage (if available)
+   - Prompts for credentials if not provided via command-line arguments
+   - Credentials are not stored - you'll be prompted each time (unless provided via `--username` and `--password`)
    - Supports both username/password and API tokens
    - Auto-detects API tokens and uses `__token__` as username
 4. **Repository Configuration**: Configures the target repository (PyPI, TestPyPI, or Azure)
@@ -619,11 +619,22 @@ publisher.publish()
 
 ### Credential Storage
 
-The package uses the `keyring` library (if installed) to securely store credentials. Credentials are stored per repository and will be reused on subsequent runs.
+**Note**: The package does not store credentials by default. Credentials must be provided via command-line arguments (`--username` and `--password`) or will be prompted each time you run the publish command. This ensures credentials are not persisted and must be entered fresh each time.
 
-Install keyring for secure credential storage:
-```bash
-pip install keyring
+If you previously used an older version that stored credentials in keyring, you can clear them using:
+
+```python
+from python_package_folder import Publisher, Repository
+
+publisher = Publisher(repository=Repository.AZURE)
+publisher.clear_stored_credentials()
+```
+
+Or manually using Python:
+```python
+import keyring
+keyring.delete_password("python-package-folder-azure", "username")
+# Also delete the password if you know the username
 ```
 
 ## Command Line Options

{python_package_folder-1.2.1 → python_package_folder-1.2.2}/coverage.svg

@@ -14,7 +14,7 @@
   <g fill="#fff" text-anchor="middle" font-family="DejaVu Sans,Verdana,Geneva,sans-serif" font-size="11">
     <text x="31.5" y="15" fill="#010101" fill-opacity=".3">coverage</text>
     <text x="31.5" y="14">coverage</text>
-    <text x="81" y="15" fill="#010101" fill-opacity=".3">68%</text>
-    <text x="81" y="14">68%</text>
+    <text x="81" y="15" fill="#010101" fill-opacity=".3">67%</text>
+    <text x="81" y="14">67%</text>
   </g>
 </svg>

{python_package_folder-1.2.1 → python_package_folder-1.2.2}/src/python_package_folder/publisher.py

@@ -41,12 +41,15 @@ class Publisher:
     This class manages the publishing process, including credential handling
     and repository configuration. It uses twine under the hood for actual publishing.
 
+    Credentials are not stored - they must be provided via command-line arguments
+    or will be prompted each time. This ensures credentials are not persisted.
+
     Attributes:
         repository: Target repository for publishing
         dist_dir: Directory containing built distribution files
         repository_url: Custom repository URL (for Azure or custom PyPI servers)
-        username: Username for authentication (optional, can be prompted)
-        password: Password/token for authentication (optional, can be prompted)
+        username: Username for authentication (optional, will be prompted if not provided)
+        password: Password/token for authentication (optional, will be prompted if not provided)
     """
 
     def __init__(
@@ -109,8 +112,9 @@ class Publisher:
         """
         Get credentials for publishing.
 
-        Prompts for username and password/token if not already provided.
-        Uses keyring if available to store/retrieve credentials securely.
+        Always prompts for username and password/token if not already provided.
+        Does not use keyring to store/retrieve credentials - credentials must be
+        provided via command-line arguments or will be prompted each time.
 
         Returns:
             Tuple of (username, password/token)
@@ -118,24 +122,8 @@ class Publisher:
         username = self.username
         password = self.password
 
-        # Try to get from keyring if available
-        if keyring and not username:
-            try:
-                username = keyring.get_password(
-                    f"python-package-folder-{self.repository.value}", "username"
-                )
-            except Exception:
-                pass
-
-        if keyring and not password:
-            try:
-                password = keyring.get_password(
-                    f"python-package-folder-{self.repository.value}", username or "token"
-                )
-            except Exception:
-                pass
-
-        # Prompt if still not available
+        # Always prompt if not provided via command-line arguments
+        # We don't use keyring to avoid storing credentials
         if not username:
             username = input(f"Enter username for {self.repository.value}: ").strip()
             if not username:
@@ -160,18 +148,7 @@ class Publisher:
                 )
                 username = "__token__"
 
-        # Store in keyring if available
-        if keyring:
-            try:
-                keyring.set_password(
-                    f"python-package-folder-{self.repository.value}", "username", username
-                )
-                keyring.set_password(
-                    f"python-package-folder-{self.repository.value}", username, password
-                )
-            except Exception:
-                # Keyring storage is optional, continue if it fails
-                pass
+        # Do not store in keyring - credentials are not persisted
 
         return username, password
 
@@ -253,6 +230,9 @@ class Publisher:
         cmd = ["twine", "upload"]
         if skip_existing:
             cmd.append("--skip-existing")
+        # Always use verbose for Azure Artifacts to get better error details
+        if self.repository == Repository.AZURE:
+            cmd.append("--verbose")
         cmd.extend(["--repository-url", repo_url])
         cmd.extend(["--username", username])
         cmd.extend(["--password", password])
@@ -284,6 +264,31 @@ class Publisher:
         self.password = None
         self.publish(skip_existing=skip_existing)
 
+    def clear_stored_credentials(self) -> None:
+        """
+        Clear any stored credentials from keyring for this repository.
+
+        This method can be used to remove previously stored credentials.
+        Note: The current implementation does not store credentials, but this
+        method is provided for compatibility and to clear any old stored credentials.
+        """
+        if keyring:
+            try:
+                service_name = f"python-package-folder-{self.repository.value}"
+                # Try to get and delete stored username
+                stored_username = keyring.get_password(service_name, "username")
+                if stored_username:
+                    try:
+                        keyring.delete_password(service_name, stored_username)
+                    except Exception:
+                        pass
+                    try:
+                        keyring.delete_password(service_name, "username")
+                    except Exception:
+                        pass
+            except Exception:
+                pass
+
 
 def get_repository_help() -> str:
     """