api_keys 0.2.1 → 0.4.0

data/lib/generators/api_keys/templates/initializer.rb

@@ -1,77 +1,199 @@
 # frozen_string_literal: true
 
 ApiKeys.configure do |config|
-  # === Core Authentication ===
+  # ============================================================================
+  # CORE AUTHENTICATION
+  # ============================================================================
 
   # The HTTP header name where the API key is expected.
   # Default: "Authorization" (expects "Bearer <token>")
   # config.header = "Authorization"
 
   # The query parameter name to check as a fallback if the header is missing.
-  # Set to nil to disable query parameter lookup (recommended for security).
+  # WARNING: Query parameters appear in logs, browser history, and Referer headers.
+  # Only enable for development/testing. Set to nil to disable (recommended).
   # Default: nil
   # config.query_param = "api_key"
 
-  # === Token Generation ===
+  # ============================================================================
+  # DASHBOARD CONFIGURATION
+  # ============================================================================
+  #
+  # The api_keys engine provides a web UI for users to manage their API keys.
+  # Configure how the dashboard integrates with your application's auth system.
+  # ============================================================================
 
-  # A lambda/proc that returns the prefix for newly generated tokens.
-  # Defaults to "ak_".
-  # Once set, do NOT change or all previously generated keys may become invalid!
-  # config.token_prefix = -> { "ak_" }
+  # Controller class that the engine dashboard inherits from. Configure this in
+  # the initializer before engine controllers load. Accepts a Class or constant
+  # name string.
+  # Default: "::ApplicationController"
+  # config.parent_controller = "Admin::ApplicationController"
 
-  # The number of random bytes to generate for the token (before encoding).
-  # More bytes = more entropy = harder to guess.
-  # Default: 24 (generates ~32 Base58 chars or 48 hex chars)
-  # config.token_length = 32
+  # The method that returns the current API key owner in your controllers.
+  # This should return the model instance that has_api_keys.
+  # Default: :current_user (works with Devise out of the box)
+  #
+  # Example for Organization-owned keys:
+  # config.current_owner_method = :current_organization
 
-  # The encoding alphabet for the random part of the token.
-  # :base58 (recommended) - shorter, avoids ambiguous chars (0, O, I, l)
-  # :hex - standard hexadecimal encoding
-  # Default: :base58
-  # config.token_alphabet = :hex
+  # The method that authenticates/requires login for the dashboard.
+  # This should be a before_action-style method that ensures the owner is logged in.
+  # Default: :authenticate_user! (works with Devise out of the box)
+  #
+  # Example for Organization-owned keys:
+  # config.authenticate_owner_method = :authenticate_organization!
 
-  # === Storage & Verification ===
+  # Dashboard environment filtering (only applies when key_types is configured).
+  # When false (default), dashboard only shows keys matching current_environment.
+  # When true, dashboard shows keys from all environments.
+  # Default: false
+  #
+  # config.dashboard_allow_cross_environment = false
 
-  # The hashing strategy used to store token digests in the database.
-  # :sha256 (recommended) - fast, performant, O(1) lookups, but less secure if database is compromised (salted with prefix only)
-  # :bcrypt - for security-critical tokens: includes salt, computationally expensive, can cause lags, 10x-50x slower than sha256
-  # Default: :sha256
-  # config.hash_strategy = :bcrypt
+  # URL for the "back" link in the dashboard UI.
+  # Default: "/"
+  # config.return_url = "/settings"
 
-  # === Dashboard Configuration ===
+  # Text for the "back" link.
+  # Default: "‹ Home"
+  # config.return_text = "‹ Back to Settings"
 
-  # IMPORTANT: Owner Context Configuration
-  # The api_keys dashboard needs to know how to find the current owner
-  # of API keys in your application. By default, it assumes you have
-  # a User model with current_user/authenticate_user! methods (Devise-style).
+  # ============================================================================
+  # TOKEN PREFIXES
+  # ============================================================================
   #
-  # If your API keys belong to a different model (e.g., Organization),
-  # you MUST configure these methods:
+  # API keys are generated with a prefix followed by random characters:
+  #   "ak_7Hq2mJvK9pRs3xYz..."
+  #   prefix        = ak_
+  #   random part   = 7Hq2mJvK9pRs3xYz...
+  #
+  # The prefix system has two modes:
+  #
+  # 1. SIMPLE MODE (default): All keys use the same prefix from `token_prefix`
+  #    Example: ak_7Hq2mJvK9pRs3xYz...
+  #
+  # 2. KEY TYPES MODE: Different key types get different prefixes based on
+  #    their type and environment (Stripe-style)
+  #    Example: pk_test_7Hq2mJvK..., sk_live_9xYz3pRs...
+  #
+  # See "KEY TYPES & ENVIRONMENTS" section below to enable key types mode.
 
-  # The method that returns the current API key owner in your controllers.
-  # This should return the object that has_api_keys (e.g., current_organization).
-  # Default: :current_user
-  # config.current_owner_method = :current_organization
+  # ----------------------------------------------------------------------------
+  # Simple Prefix (when NOT using KEY TYPES)
+  # ----------------------------------------------------------------------------
+  #
+  # A lambda/proc that returns the prefix for newly generated tokens.
+  # This is ONLY used when:
+  #   - key_types is not configured (empty hash), OR
+  #   - Creating a key without specifying a key_type
+  #
+  # When key_types IS configured and you specify a key_type, this setting
+  # is IGNORED - the prefix comes from the key type's configuration instead.
+  #
+  # Changing this later is SAFE for existing keys: every key stores its own
+  # prefix, so authentication keeps finding keys minted under retired
+  # prefixes (sha256 looks up by pure token digest; bcrypt uses a bounded
+  # stored-prefix lookup with an indexed last-four fallback for deployments
+  # with many retired prefixes). Only NEW keys wear the new prefix.
+  # Default: -> { "ak_" }
+  # config.token_prefix = -> { "myapp_" }
+
+  # ============================================================================
+  # KEY TYPES & ENVIRONMENTS (Stripe-style Publishable/Secret Keys)
+  # ============================================================================
+  #
+  # For applications that distribute software with embedded API keys (desktop
+  # apps, mobile apps, CLI tools), you can create different key types with
+  # different permission levels - similar to Stripe's publishable/secret pattern.
+  #
+  # When enabled:
+  # - Keys get type+environment prefixes: pk_test_, pk_live_, sk_test_, sk_live_
+  # - Each type can have different permissions, revocability, and limits
+  # - The `token_prefix` setting above is IGNORED for typed keys
+  #
+  # By default, this feature is DISABLED (empty hash) for backwards compatibility.
+  # Existing keys without key_type/environment continue to work normally.
+  # ============================================================================
 
-  # The method that authenticates/requires login for the dashboard.
-  # This should ensure the owner is logged in before accessing the dashboard.
-  # Default: :authenticate_user!
-  # config.authenticate_owner_method = :authenticate_organization!
+  # Define your key types with their properties:
+  #
+  # - prefix:      The token prefix for this type (e.g., "pk" becomes pk_test_)
+  # - permissions: Scope ceiling - array of allowed scopes, or :all for unrestricted
+  # - revocable:   Whether keys of this type can be revoked/deleted (default: true)
+  # - limit:       Max keys of this type per owner per environment (nil = unlimited)
+  # - public:      If true AND revocable: false, stores plaintext token in metadata
+  #                so it can be viewed again in the dashboard. Use ONLY for publishable
+  #                keys designed to be embedded in distributed apps. Public types must
+  #                use a finite, non-empty permissions array (never :all). (default: false)
+  #                SECURITY: NEVER set public: true on secret keys!
+  #
+  # config.key_types = {
+  #   publishable: {
+  #     prefix: "pk",                    # → pk_test_, pk_live_
+  #     permissions: %w[read validate],  # Can ONLY have these scopes
+  #     revocable: false,                # Cannot be revoked - protects deployed apps!
+  #     public: true,                    # Store token for later viewing in dashboard
+  #     limit: 1                         # Only 1 publishable key per environment
+  #   },
+  #   secret: {
+  #     prefix: "sk",                    # → sk_test_, sk_live_
+  #     permissions: :all                # No scope restrictions
+  #     # revocable: true (default)
+  #     # public: false (default) - NEVER store secret keys!
+  #     # limit: nil (default = unlimited)
+  #   }
+  # }
+
+  # Define your environments with their prefix segments:
+  #
+  # - prefix_segment: The middle part of the prefix (e.g., "test" → pk_test_)
+  #   Set to nil for single-environment setups (prefix becomes just "pk_")
+  #
+  # config.environments = {
+  #   test: { prefix_segment: "test" },  # Development/staging → pk_test_, sk_test_
+  #   live: { prefix_segment: "live" }   # Production → pk_live_, sk_live_
+  # }
+  #
+  # Alternative naming (Stripe's newer convention):
+  # config.environments = {
+  #   sandbox: { prefix_segment: "test" },
+  #   live: { prefix_segment: "live" }
+  # }
+
+  # Lambda that returns the current environment.
+  # Used to auto-select environment when creating keys and for isolation checks.
+  # Default: -> { :default }
+  #
+  # config.current_environment = -> { Rails.env.production? ? :live : :test }
 
-  # Example for Organization-owned keys:
-  # config.current_owner_method = :current_organization
-  # config.authenticate_owner_method = :authenticate_organization!
+  # Enable strict environment isolation.
+  # When true, keys can ONLY authenticate in their matching environment:
+  # - test keys return :environment_mismatch error in production
+  # - live keys return :environment_mismatch error in development/test
+  # Default: false
+  #
+  # config.strict_environment_isolation = true
 
-  # === Optional Behaviors ===
+  # Default key type when not specified in create_api_key!
+  # When set and key_types is configured, keys created without explicit
+  # key_type will use this default.
+  # Default: nil (must specify key_type explicitly when key_types is configured)
+  #
+  # config.default_key_type = :secret
+
+  # ============================================================================
+  # KEY LIMITS & BEHAVIORS
+  # ============================================================================
 
   # Global limit on the number of *active* keys an owner can have.
-  # Can be overridden by `max_keys` in the `has_api_keys` block.
+  # Can be overridden per-model with `max_keys` in the `has_api_keys` block, like:
+  #   has_api_keys max_keys: 5
   # Set to nil for no global limit.
   # Default: nil
   # config.default_max_keys_per_owner = 10
 
-  # If true, requires a `name` when creating keys.
-  # Can be overridden by `require_name` in the `has_api_keys` block.
+  # Require a name when creating keys.
+  # Can be overridden per-model with `require_name` in the `has_api_keys` block.
   # Default: false
   # config.require_key_name = true
 
@@ -81,104 +203,123 @@ ApiKeys.configure do |config|
   # config.expire_after = 90.days
 
   # Default scopes to assign to newly created keys if none are specified.
-  # Applies globally unless overridden by `has_api_keys` in the owner model.
+  # Can be overridden per-model with `default_scopes` in the `has_api_keys` block.
   # Default: []
   # config.default_scopes = ["read"]
 
-  # === Performance ===
-
-  # Time-to-live (TTL) for caching ApiKey lookups.
-  # Higher values improve performance by reducing database lookups and
-  # expensive comparisons (like bcrypt), but increase the delay for changes
-  # (like revocation or expiration) to take effect for already cached keys.
-  # Set to 0 or nil to disable caching.
-  # Uses Rails.cache.
-  # Default: 5.seconds
-  # config.cache_ttl = 30.seconds # Higher TTL = higher risk of "revoked-but-still-valid" edge cases
-
-  # === Security ===
+  # ============================================================================
+  # TOKEN GENERATION
+  # ============================================================================
+  #
+  # The number of random bytes to generate for the token (before encoding).
+  # More bytes = more entropy = harder to guess.
+  # SECURITY: Minimum recommended is 16 bytes (128 bits). Default provides 192 bits.
+  # Default: 24 (generates ~32 Base58 chars or 48 hex chars)
+  # config.token_length = 24
 
-  # If true, logs a warning if the gem is used over HTTP in production.
-  # Default: true
-  # config.https_only_production = true
+  # The encoding alphabet for the random part of the token.
+  #   :base58 - shorter tokens, avoids ambiguous chars (0, O, I, l) - RECOMMENDED
+  #   :hex    - standard hexadecimal encoding, longer tokens
+  # Default: :base58
+  # config.token_alphabet = :base58
 
-  # If true (and https_only_production is true), raises an error instead of
-  # just logging a warning when used over HTTP in production.
-  # Default: false
-  # config.https_strict_mode = true
+  # ============================================================================
+  # STORAGE & VERIFICATION
+  # ============================================================================
 
-  # IMPORTANT: Usage Statistics & Background Jobs
-  # ---------------------------------------------
-  # The api_keys gem executes callbacks and updates the `last_used_at` timestamp on every successful authentication
-  # and optionally increments `requests_count` if `track_requests_count` is true.
-  # To avoid blocking the request cycle, these calls and updates are performed asynchronously
-  # using ActiveJob (`ApiKeys::Jobs::UpdateStatsJob` and `ApiKeys::Jobs::CallbacksJob`)
+  # The hashing strategy used to store token digests in the database.
   #
-  # *** For callbacks to be executed, and for reliable and performant usage statistics, you MUST configure a persistent
-  # ActiveJob backend adapter in your Rails app! (e.g., Sidekiq, GoodJob, SolidQueue, Resque, Delayed::Job). ***
+  # :sha256 (RECOMMENDED for API keys)
+  #   - Fast, performant, O(1) database lookups
+  #   - Secure for high-entropy tokens (192+ bits from SecureRandom)
+  #   - Industry standard for API keys (used by Stripe, GitHub, AWS)
   #
-  # - Using the default :async adapter is NOT recommended for production as updates
-  #   run in-process and may be lost if the application restarts unexpectedly.
-  # - Using the :inline adapter will perform updates synchronously within the request,
-  #   negating the performance benefits and potentially slowing down responses.
+  # :bcrypt (for extra security at cost of performance)
+  #   - Includes salt, computationally expensive by design
+  #   - 10x-50x slower than SHA256 - impacts every API request
+  #   - Better for low-entropy secrets (passwords), overkill for random API keys
+  #   - Prefix + encoded random token must fit bcrypt's 72-byte input limit
   #
-  # If you do not have a persistent background job system configured, callbacks won't fire and stats updates
-  # might be unreliable or impact performance. Consider disabling `track_requests_count` and avoid using callbacks
-  # if you cannot use a persistent backend and performance is critical.
+  # Default: :sha256
+  # config.hash_strategy = :sha256
 
-  # === Background Job Queues ===
+  # ============================================================================
+  # SECURITY
+  # ============================================================================
 
-  # Configure the ActiveJob queue name for processing API key usage statistics.
-  # Default: :default
-  # config.stats_job_queue = :api_keys_stats
+  # Log a warning if API authentication is attempted over HTTP in production.
+  # API keys should always be transmitted over HTTPS.
+  # Default: true
+  # config.https_only_production = true
 
-  # Configure the ActiveJob queue name for processing asynchronous callbacks.
-  # Default: :default
-  # config.callbacks_job_queue = :api_keys_callbacks
+  # Reject authentication (instead of just warning) over HTTP in production.
+  # Only applies when https_only_production is true.
+  # Default: true
+  # config.https_strict_mode = true
 
-  # === Global Async Toggle ===
+  # ============================================================================
+  # BACKGROUND JOBS & CALLBACKS
+  # ============================================================================
+  #
+  # The gem can update usage statistics and execute callbacks asynchronously
+  # using ActiveJob. For reliable operation, configure a persistent job backend
+  # (Sidekiq, GoodJob, SolidQueue, etc.).
+  #
+  # WARNING: The default :async adapter may lose jobs on app restart.
+  # The :inline adapter runs synchronously, impacting request performance.
+  # ============================================================================
 
-  # Set to false to completely disable all background job enqueueing performed
-  # by this gem (stats updates and callbacks). If false, `last_used_at`,
-  # `requests_count`, and configured callbacks will NOT be processed.
-  # Useful if you handle these concerns externally or cannot use ActiveJob.
+  # Master toggle for all background job operations.
+  # When false, last_used_at, requests_count, and callbacks are NOT processed.
   # Default: true
-  # config.enable_async_operations = false
+  # config.enable_async_operations = true
 
-  # === Usage Statistics ===
-
-  # If true, automatically update `last_used_at` and increment `requests_count`
-  # on the ApiKey record upon successful authentication.
-  # Note: Incrementing counters frequently can impact DB performance.
+  # Track request counts (increments requests_count on each authentication).
+  # Exact counting bypasses last-used debouncing and therefore enqueues one stats
+  # job per successful request. High-frequency updates can impact queue/database
+  # performance.
   # Default: false
-  # config.track_requests_count = true
-
-  # === Callbacks ===
-
-  # A lambda/proc to run *before* token extraction and verification.
-  # Receives the request object.
-  # Default: ->(request) { }
-  # config.before_authentication = ->(request) { Rails.logger.info "Authenticating request: #{request.uuid}" }
+  # config.track_requests_count = false
 
-  # A lambda/proc to run *after* authentication attempt (success or failure).
-  # Receives the ApiKeys::Services::Authenticator::Result object.
-  # Default: ->(result) { }
-  # config.after_authentication = ->(result) { MyAnalytics.track_auth(result) }
+  # Minimum interval between last_used_at jobs when exact request counting is
+  # disabled. Set to 0 or nil to update on every successful authentication.
+  # Default: 1.minute
+  # config.stats_update_interval = 1.minute
 
-  # === Engine UI Configuration ===
+  # Queue names for background jobs.
+  # Default: :default
+  # config.stats_job_queue = :default
+  # config.callbacks_job_queue = :default
+
+  # Callbacks enqueued on authentication attempts. Contexts are serializable
+  # hashes and never contain the token, request, result, or ApiKey object.
+  # before_authentication: { request_uuid: String }
+  # after_authentication:  { success:, error_code:, api_key_id:,
+  #                          required_scope_check: (optional) }
+  #
+  # Default: empty procs (no-op)
+  # config.before_authentication = ->(context) { Rails.logger.info "Auth request: #{context[:request_uuid]}" }
+  # config.after_authentication = ->(context) { Analytics.track_auth(context) }
 
-  # The URL or path helper method (as a string) to link back to from the engine's UI.
-  # Useful when embedding the engine within a larger application context.
-  # Default: "/" (Root path)
-  # config.return_url = "/app/settings"
+  # ============================================================================
+  # PERFORMANCE
+  # ============================================================================
 
-  # The text displayed for the return link.
-  # Default: "‹ Home"
-  # config.return_text = "‹ Back to Settings"
+  # Time-to-live (TTL) for caching API key ID lookup hints in Rails.cache.
+  #
+  # Cache entries are never authorization authority. Every hit reloads the
+  # current database row and cryptographically re-verifies the token, so
+  # revocation, expiration, and permission changes remain immediate.
+  #
+  # Set to 0 or nil to disable caching entirely.
+  # Default: 5.seconds
+  # config.cache_ttl = 5.seconds
 
-  # === Debugging ===
+  # ============================================================================
+  # DEBUGGING
+  # ============================================================================
 
-  # Enable verbose logging for debugging purposes.
+  # Enable verbose debug logging.
   # Default: false
-  # config.debug_logging = true
+  # config.debug_logging = false
 end

metadata

@@ -1,13 +1,13 @@
 --- !ruby/object:Gem::Specification
 name: api_keys
 version: !ruby/object:Gem::Version
-  version: 0.2.1
+  version: 0.4.0
 platform: ruby
 authors:
 - rameerez
 bindir: exe
 cert_chain: []
-date: 2025-08-04 00:00:00.000000000 Z
+date: 1980-01-02 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: rails
@@ -23,34 +23,6 @@ dependencies:
     - - ">="
       - !ruby/object:Gem::Version
         version: '6.1'
-- !ruby/object:Gem::Dependency
-  name: activerecord
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '6.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '6.0'
-- !ruby/object:Gem::Dependency
-  name: activesupport
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '6.0'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - ">="
-      - !ruby/object:Gem::Version
-        version: '6.0'
 - !ruby/object:Gem::Dependency
   name: base58
   requirement: !ruby/object:Gem::Requirement
@@ -69,44 +41,22 @@ dependencies:
   name: bcrypt
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '3.1'
-  type: :runtime
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '3.1'
-- !ruby/object:Gem::Dependency
-  name: bundler
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
+        version: 3.1.22
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '2.0'
-  type: :development
+        version: '4'
+  type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - "~>"
-      - !ruby/object:Gem::Version
-        version: '2.0'
-- !ruby/object:Gem::Dependency
-  name: rake
-  requirement: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
+    - - ">="
       - !ruby/object:Gem::Version
-        version: '13.0'
-  type: :development
-  prerelease: false
-  version_requirements: !ruby/object:Gem::Requirement
-    requirements:
-    - - "~>"
+        version: 3.1.22
+    - - "<"
       - !ruby/object:Gem::Version
-        version: '13.0'
+        version: '4'
 description: Add secure, production-ready API key authentication to your Rails app
   in minutes. Handles key generation, hashing, expiration, revocation, per-key scopes;
   plus a drop-in dashboard for your users to self-issue and manage their own API keys.
@@ -119,17 +69,24 @@ files:
 - CHANGELOG.md
 - LICENSE.txt
 - README.md
-- Rakefile
+- SECURITY.md
 - api_keys_dashboard.webp
 - api_keys_permissions.webp
 - api_keys_token.webp
 - app/controllers/api_keys/application_controller.rb
 - app/controllers/api_keys/keys_controller.rb
 - app/controllers/api_keys/security_controller.rb
+- app/views/api_keys/keys/_empty_state.html.erb
 - app/views/api_keys/keys/_form.html.erb
+- app/views/api_keys/keys/_key_actions.html.erb
+- app/views/api_keys/keys/_key_badges.html.erb
 - app/views/api_keys/keys/_key_row.html.erb
+- app/views/api_keys/keys/_key_status.html.erb
 - app/views/api_keys/keys/_keys_table.html.erb
+- app/views/api_keys/keys/_publishable_keys.html.erb
+- app/views/api_keys/keys/_secret_keys.html.erb
 - app/views/api_keys/keys/_show_token.html.erb
+- app/views/api_keys/keys/_token_display.html.erb
 - app/views/api_keys/keys/edit.html.erb
 - app/views/api_keys/keys/index.html.erb
 - app/views/api_keys/keys/new.html.erb
@@ -142,6 +99,11 @@ files:
 - lib/api_keys/configuration.rb
 - lib/api_keys/controller.rb
 - lib/api_keys/engine.rb
+- lib/api_keys/errors.rb
+- lib/api_keys/form_builder_extensions.rb
+- lib/api_keys/helpers/expiration_options.rb
+- lib/api_keys/helpers/token_session.rb
+- lib/api_keys/helpers/view_helpers.rb
 - lib/api_keys/jobs/callbacks_job.rb
 - lib/api_keys/jobs/update_stats_job.rb
 - lib/api_keys/logging.rb
@@ -152,7 +114,11 @@ files:
 - lib/api_keys/services/token_generator.rb
 - lib/api_keys/tenant_resolution.rb
 - lib/api_keys/version.rb
+- lib/generators/api_keys/add_authentication_index_generator.rb
+- lib/generators/api_keys/add_key_types_generator.rb
 - lib/generators/api_keys/install_generator.rb
+- lib/generators/api_keys/templates/add_authentication_index_to_api_keys.rb.erb
+- lib/generators/api_keys/templates/add_key_types_to_api_keys.rb.erb
 - lib/generators/api_keys/templates/create_api_keys_table.rb.erb
 - lib/generators/api_keys/templates/initializer.rb
 homepage: https://github.com/rameerez/api_keys
@@ -178,7 +144,7 @@ required_rubygems_version: !ruby/object:Gem::Requirement
     - !ruby/object:Gem::Version
       version: '0'
 requirements: []
-rubygems_version: 3.6.2
+rubygems_version: 3.6.9
 specification_version: 4
 summary: Gate your Rails API with secure, self-serve API keys in minutes
 test_files: []

data/Rakefile

@@ -1,32 +0,0 @@
-begin
-  require "bundler/setup"
-rescue LoadError
-  puts "You must `gem install bundler` and `bundle install` to run rake tasks"
-end
-
-require "bundler/gem_tasks"
-
-require "rdoc/task"
-
-RDoc::Task.new(:rdoc) do |rdoc|
-  rdoc.rdoc_dir = "rdoc"
-  rdoc.title = "Pay"
-  rdoc.options << "--line-numbers"
-  rdoc.rdoc_files.include("README.md")
-  rdoc.rdoc_files.include("lib/**/*.rb")
-end
-
-APP_RAKEFILE = File.expand_path("test/dummy/Rakefile", __dir__)
-load "rails/tasks/engine.rake"
-
-load "rails/tasks/statistics.rake"
-
-require "rake/testtask"
-
-Rake::TestTask.new(:test) do |t|
-  t.libs << "test"
-  t.pattern = "test/**/*_test.rb"
-  t.verbose = false
-end
-
-task default: :test