use token to upload to pypi (#6406)

Author: NoureldinYosri

.github/workflows/release-main.yml

@@ -21,10 +21,13 @@ jobs:
         run: |
           python -m pip install --upgrade pip
           pip install setuptools wheel twine
-      - name: Build and publish
+      - name: Create PYPI config file
         env:
-          TWINE_USERNAME: ${{ secrets.PYPI_USER }}
-          TWINE_PASSWORD: ${{ secrets.PYPI_PASS }}
+          CIRQ_PYPI_TOKEN: ${{ secrets.CIRQ_PYPI_TOKEN }}
+          CIRQ_TEST_PYPI_TOKEN: ${{ secrets.CIRQ_TEST_PYPI_TOKEN }}
+        run: |
+          dev_tools/packaging/create_pypirc.sh
+      - name: Build and publish
         run: |
           export CIRQ_PRE_RELEASE_VERSION=$(dev_tools/packaging/generate-dev-version-id.sh)
           [[ "$CIRQ_PRE_RELEASE_VERSION" =~ .*dev.* ]] && echo "Deploying dev version '$CIRQ_PRE_RELEASE_VERSION'" || (echo "not dev version"; exit 1)

dev_tools/packaging/create_pypirc.sh

@@ -0,0 +1,13 @@
+#!bin/bash
+
+# Create default pypi config file with token authentication.
+# refrence: https://packaging.python.org/en/latest/specifications/pypirc/#common-configurations
+echo """
+[pypi]
+username = __token__
+password = ${CIRQ_PYPI_TOKEN}
+
+[testpypi]
+username = __token__
+password = ${CIRQ_TEST_PYPI_TOKEN}
+""" >> $HOME/.pypirc