Trusted Tokens
I don't always authenticate securely, but when I do, I use OpenID Connect
In 'Trusted Tokens', you play as a PyPI package maintainer who must securely publish a package without sharing long-lived passwords or API tokens. You must navigate the OpenSSL library to generate short-lived identity tokens and exchange them with PyPI using OpenID Connect. Be careful not to expose your tokens to external systems or risk compromising your package's security.
