Thanks for helping improve rails_api_keys. This gem stays intentionally thin: keys + auth helpers only. Host apps own UI, routes, and domain APIs.
bundle install
bundle exec rspec
bin/rubocopSpecs boot spec/dummy (sqlite). Run both RSpec and RuboCop before opening a PR.
- Open an issue first for larger changes so we can agree on scope.
- Keep the engine boundary thin — no host UI, mailers, jobs, views, or mounted business routes.
- Prefer single quotes and
# frozen_string_literal: trueon Ruby files. - Add or update RSpec coverage for behavior changes.
- Update
CHANGELOG.mdunder[Unreleased]when the public API or user-facing behavior changes. - Update
.cursor/rules/context.mdcandAGENTS.mdwhen the public API changes.
Do not report security vulnerabilities in public issues. See SECURITY.md.
Participation is covered by our Code of Conduct.