class RuboCop::Cop::Gemspec::RequireMFA


= ‘true’
Gem::Specification.new do |spec|
# good<br><br>end<br>spec.metadata = ‘false’
Gem::Specification.new do |spec|
# bad
end
}
‘rubygems_mfa_required’ => ‘true’
spec.metadata = {
Gem::Specification.new do |spec|
# good
end
}
‘rubygems_mfa_required’ => ‘false’
spec.metadata = {
Gem::Specification.new do |spec|
# bad<br><br>end<br>spec.metadata = ‘true’
Gem::Specification.new do |spec|
# good
end
}
‘rubygems_mfa_required’ => ‘true’
spec.metadata = {
Gem::Specification.new do |spec|
# good
end
# no ‘rubygems_mfa_required` metadata specified
Gem::Specification.new do |spec|
# bad
@example
confident that gem updates were pushed by maintainers.
This helps make your gem more secure, as users can be more
* adding or removing owners using gem ownership page
* `gem owner –add/remove`
* `gem yank`
* `gem push`
operations):
(see RubyGems’ documentation for the full list of privileged
required for accounts to be able perform privileged operations, such as
This setting tells RubyGems that MFA (Multi-Factor Authentication) is
Requires a gemspec to have ‘rubygems_mfa_required` metadata set.

def autocorrect(corrector, node, block_var, metadata)

def autocorrect(corrector, node, block_var, metadata)
  if metadata
    return unless metadata.hash_type?
    correct_metadata(corrector, metadata)
  else
    insert_mfa_required(corrector, node, block_var)
  end
end

def change_value(corrector, value)

def change_value(corrector, value)
  corrector.replace(value, "'true'")
end

def correct_metadata(corrector, metadata)

def correct_metadata(corrector, metadata)
  if metadata.pairs.any?
    corrector.insert_after(metadata.pairs.last, ",\n'rubygems_mfa_required' => 'true'")
  else
    corrector.insert_before(metadata.loc.end, "'rubygems_mfa_required' => 'true'")
  end
end

def insert_mfa_required(corrector, node, block_var)

def insert_mfa_required(corrector, node, block_var)
  corrector.insert_before(node.loc.end, <<~RUBY)
    #{block_var}.metadata['rubygems_mfa_required'] = 'true'
  RUBY
end

def mfa_value(metadata_value)

def mfa_value(metadata_value)
  return unless metadata_value
  return metadata_value if metadata_value.str_type?
  rubygems_mfa_required(metadata_value).first
end

def on_block(node) # rubocop:disable Metrics/MethodLength, InternalAffairs/NumblockHandler

rubocop:disable Metrics/MethodLength, InternalAffairs/NumblockHandler
def on_block(node) # rubocop:disable Metrics/MethodLength, InternalAffairs/NumblockHandler
  gem_specification(node) do |block_var|
    metadata_value = metadata(node)
    mfa_value = mfa_value(metadata_value)
    if mfa_value
      unless true_string?(mfa_value)
        add_offense(mfa_value) do |corrector|
          change_value(corrector, mfa_value)
        end
      end
    else
      add_offense(node) do |corrector|
        autocorrect(corrector, node, block_var, metadata_value)
      end
    end
  end
end