Trusted IdP

Trusted publishing is about using the OpenID Connect standard to exchange short-lived identity tokens between a trusted third-party service and PyPI. In this game, you play as a PyPI package maintainer configuring PyPI to trust an identity provided by a given OpenID Connect Identity Provider (IdP). But be careful! You must use your cryptographic skills to ensure that the identity being trusted is legitimate and not an imposter.