Skip to content

feat: require 2fa for new user to upload as well #14505

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 4 commits into from
Sep 8, 2023

Conversation

miketheman
Copy link
Member

Expand the policy to include file upload actions.

Follows #14294
Refs #13762

Expand the policy to include file upload actions.

Follows pypi#14294
Refs pypi#13762

Signed-off-by: Mike Fiedler <[email protected]>
@miketheman miketheman requested a review from a team as a code owner September 7, 2023 22:56
@miketheman
Copy link
Member Author

The response message isn't perfect, since it was geared towards management actions, but a twine upload will show:

ERROR    HTTPError: 403 Forbidden from http://localhost/legacy/
         You must enable two factor authentication to manage other settings

@miketheman miketheman added the 2FA label Sep 7, 2023
@ewdurbin
Copy link
Member

ewdurbin commented Sep 8, 2023

See https://github.com/miketheman/warehouse/pull/2048/files for a proposed refactor to improve the error message for uploads.

@miketheman
Copy link
Member Author

wonder-twins-powers

@miketheman miketheman enabled auto-merge (squash) September 8, 2023 13:30
@miketheman miketheman merged commit 072ce4f into pypi:main Sep 8, 2023
@miketheman miketheman deleted the miketheman/require-2fa-for-upload branch September 8, 2023 13:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants