api_keys.gemspec

# frozen_string_literal: true

require_relative "lib/api_keys/version"

Gem::Specification.new do |spec|
  spec.name = "api_keys"
  spec.version = ApiKeys::VERSION
  spec.authors = ["rameerez"]
  spec.email = ["rubygems@rameerez.com"]

  spec.summary     = "Gate your Rails API with secure, self-serve API keys in minutes"

  spec.description = "Add secure, production-ready API key authentication to your Rails app in minutes. Handles key generation, hashing, expiration, revocation, per-key scopes; plus a drop-in dashboard for your users to self-issue and manage their own API keys."

  spec.homepage = "https://github.com/rameerez/api_keys"
  spec.license = "MIT"
  spec.required_ruby_version = ">= 3.1.0"

  spec.metadata["allowed_push_host"] = "https://rubygems.org"
  spec.metadata["homepage_uri"] = "https://apikeys.rameerez.com"
  spec.metadata["source_code_uri"] = spec.homepage
  spec.metadata["changelog_uri"] = "#{spec.homepage}/blob/main/CHANGELOG.md"
  spec.metadata["rubygems_mfa_required"] = "true"

  # Specify which files should be added to the gem when it is released.
  # The `git ls-files -z` loads the files in the RubyGem that have been added into git.
  gemspec = File.basename(__FILE__)
  development_files = %w[.simplecov AGENTS.md Appraisals CLAUDE.md Rakefile context7.json]
  spec.files = IO.popen(%w[git ls-files -z], chdir: __dir__, err: IO::NULL) do |ls|
    ls.readlines("\x0", chomp: true).reject do |f|
      (f == gemspec) || development_files.include?(f) ||
        f.start_with?(*%w[bin/ gemfiles/ test/ spec/ features/ .git .github appveyor Gemfile])
    end
  end
  spec.bindir = "exe"
  spec.executables = spec.files.grep(%r{\Aexe/}) { |f| File.basename(f) }
  spec.require_paths = ["lib"]

  # Runtime Dependencies (only what end-users need to run the gem)
  spec.add_dependency "rails", ">= 6.1"
  spec.add_dependency "base58", "~> 0.2"    # For Base58 token alphabet
  # 3.1.22 fixes CVE-2026-33306 (incorrect handling of long secrets).
  spec.add_dependency "bcrypt", ">= 3.1.22", "< 4" # For secure token hashing

  # Development dependencies should go in Gemfile, not gemspec
  # See: https://guides.rubygems.org/patterns/
end