Description
Describe the bug
Hello PyPI Administrators!
I hope you are all doing well. Thank you for all the hard work and making PyPi possible.
I am Cyb3rWard0g
in PyPi. I am the owner of one project named attackcti
. I am now working on another public project that I will be releasing soon. The new project name is floki
. Initially when I looked for that name in the main PyPi index
, there was not a project with that name. However, when I checked the PyPi test index
, there was a project named "floki" already, I was able to contact the owner of the project and he agreed to delete the test project since it was just a testing package.
When I try to upload my floki
project, now that there is not a project with that name in main and test Index, I still get the message
HTTP Error 403: The user 'Cyb3rWard0g' isn't allowed to upload to project 'floki'. See https://pypi.org/help/#project-name for more information. | b"<html>\n <head>\n <title>403 The user 'Cyb3rWard0g' isn't allowed to upload to project 'floki'. See https://pypi.org/help/#project-name for more information.
I am using a token that has permissions to upload to any project in my account. This is a new project. Based on the additional context in the error message, it is related to the name of the project and not the permissions to upload a project. To validate this assumption, I tried to set up a Trusted Publisher Management
for the new project and I get the following message:
So, it is obvious that the error is related to the name of the project and not to permissions required to upload projects to my account.
Questions:
- Do I have to wait a specific amount of time to upload my project? Taking in consideration that there was another project before with the same name and author agreed to delete it?
- Is deleting the project enough to make the name available? how does that work?
- Is the name maybe still cached in the
PyPi
index? I know the name is available and it was not denied in the first place when the other user created it so there should not be a restriction to use that name right?
just making sure I understand what is going on :)
Thank you for your time!
Expected behavior
Project created in PyPi
To Reproduce
Created a project in PyPi Test Index with a specific name
Delete project from PyPi Test Index
Create a new project in PyPi index with the same name as the deleted project
Additional context