Emit a warning if the token looks invalid

Resolves #9

Author: webknjaz

twine-upload.sh

@@ -1,6 +1,22 @@
 #! /usr/bin/env bash
 set -Eeuo pipefail
 
+
+if [[
+    "$INPUT_USER" == "__token__" &&
+    ! "$INPUT_PASSWORD" =~ ^pypi-
+  ]]
+then
+    >&2 echo \
+        [WARNING]: \
+        It looks like you are trying to use an API token to \
+        authenticate in the package index and your token value does \
+        not start with '"pypi-"' as it typically should. This may \
+        cause an authentication error. Please verify that you have \
+        copied your token properly if such an error occurs.
+fi
+
+
 TWINE_USERNAME="$INPUT_USER" \
 TWINE_PASSWORD="$INPUT_PASSWORD" \
 TWINE_REPOSITORY_URL="$INPUT_REPOSITORY_URL" \