cyberark/conjur-api-ruby

View on GitHub

Showing 123 of 126 total issues

Method add_chained_cert has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.
Open

      def add_chained_cert store, chained_cert
        parse_certs(chained_cert).each do |cert|
          begin
            store.add_cert cert
          rescue OpenSSL::X509::StoreError => ex
Severity: Minor
Found in lib/conjur/cert_utils.rb - About 25 mins to fix

Cognitive Complexity

Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

A method's cognitive complexity is based on a few simple rules:

  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
  • Code is considered more complex for each "break in the linear flow of the code"
  • Code is considered more complex when "flow breaking structures are nested"

Further reading

Conjur::Configuration has missing safe method 'apply_cert_config!'
Open

    def apply_cert_config! store=OpenSSL::SSL::SSLContext::DEFAULT_CERT_STORE
Severity: Minor
Found in lib/conjur/configuration.rb by reek

A candidate method for the Missing Safe Method smell are methods whose names end with an exclamation mark.

An exclamation mark in method names means (the explanation below is taken from here ):

The ! in method names that end with ! means, “This method is dangerous”—or, more precisely, this method is the “dangerous” version of an otherwise equivalent method, with the same name minus the !. “Danger” is relative; the ! doesn’t mean anything at all unless the method name it’s in corresponds to a similar but bang-less method name. So, for example, gsub! is the dangerous version of gsub. exit! is the dangerous version of exit. flatten! is the dangerous version of flatten. And so forth.

Such a method is called Missing Safe Method if and only if her non-bang version does not exist and this method is reported as a smell.

Example

Given

class C
  def foo; end
  def foo!; end
  def bar!; end
end

Reek would report bar! as Missing Safe Method smell but not foo!.

Reek reports this smell only in a class context, not in a module context in order to allow perfectly legit code like this:

class Parent
  def foo; end
end

module Dangerous
  def foo!; end
end

class Son < Parent
  include Dangerous
end

class Daughter < Parent
end

In this example, Reek would not report the Missing Safe Method smell for the method foo of the Dangerous module.

Conjur::Configuration#add_option performs a nil-check
Open

        allow_env = options[:env].nil? || options[:env]
        env_var = options[:env] || "CONJUR_#{name.to_s.upcase}"
        def_val = options[:default]
        opt_name = name

Severity: Minor
Found in lib/conjur/configuration.rb by reek

A NilCheck is a type check. Failures of NilCheck violate the "tell, don't ask" principle.

Additionally, type checks often mask bigger problems in your source code like not using OOP and / or polymorphism when you should.

Example

Given

class Klass
  def nil_checker(argument)
    if argument.nil?
      puts "argument isn't nil!"
    end
  end
end

Reek would emit the following warning:

test.rb -- 1 warning:
  [3]:Klass#nil_checker performs a nil-check. (NilCheck)

Conjur::QueryString#options_querystring doesn't depend on instance state (maybe move it to another class?)
Open

  def options_querystring options
Severity: Minor
Found in lib/conjur/query_string.rb by reek

A Utility Function is any instance method that has no dependency on the state of the instance.

Conjur::Configuration has missing safe method 'ensure_cert_readable!'
Open

    def ensure_cert_readable!(path)
Severity: Minor
Found in lib/conjur/configuration.rb by reek

A candidate method for the Missing Safe Method smell are methods whose names end with an exclamation mark.

An exclamation mark in method names means (the explanation below is taken from here ):

The ! in method names that end with ! means, “This method is dangerous”—or, more precisely, this method is the “dangerous” version of an otherwise equivalent method, with the same name minus the !. “Danger” is relative; the ! doesn’t mean anything at all unless the method name it’s in corresponds to a similar but bang-less method name. So, for example, gsub! is the dangerous version of gsub. exit! is the dangerous version of exit. flatten! is the dangerous version of flatten. And so forth.

Such a method is called Missing Safe Method if and only if her non-bang version does not exist and this method is reported as a smell.

Example

Given

class C
  def foo; end
  def foo!; end
  def bar!; end
end

Reek would report bar! as Missing Safe Method smell but not foo!.

Reek reports this smell only in a class context, not in a module context in order to allow perfectly legit code like this:

class Parent
  def foo; end
end

module Dangerous
  def foo!; end
end

class Son < Parent
  include Dangerous
end

class Daughter < Parent
end

In this example, Reek would not report the Missing Safe Method smell for the method foo of the Dangerous module.

Conjur::Configuration#ensure_cert_readable! doesn't depend on instance state (maybe move it to another class?)
Open

    def ensure_cert_readable!(path)
Severity: Minor
Found in lib/conjur/configuration.rb by reek

A Utility Function is any instance method that has no dependency on the state of the instance.

Conjur::API::TokenExpiration#token_born is a writable attribute
Open

      attr_accessor :token_born
Severity: Minor
Found in lib/conjur/base.rb by reek

A class that publishes a setter for an instance variable invites client classes to become too intimate with its inner workings, and in particular with its representation of state.

The same holds to a lesser extent for getters, but Reek doesn't flag those.

Example

Given:

class Klass
  attr_accessor :dummy
end

Reek would emit the following warning:

reek test.rb

test.rb -- 1 warning:
  [2]:Klass declares the writable attribute dummy (Attribute)

Conjur::API takes parameters ['account', 'username'] to 5 methods
Open

      def login username, password, account: Conjur.configuration.account
        if Conjur.log
          Conjur.log << "Logging in #{username} to account #{account} via Basic authentication\n"
        end
        url_for(:authn_login, account, username, password).get
Severity: Minor
Found in lib/conjur/api/authn.rb by reek

In general, a Data Clump occurs when the same two or three items frequently appear together in classes and parameter lists, or when a group of instance variable names start or end with similar substrings.

The recurrence of the items often means there is duplicate code spread around to handle them. There may be an abstraction missing from the code, making the system harder to understand.

Example

Given

class Dummy
  def x(y1,y2); end
  def y(y1,y2); end
  def z(y1,y2); end
end

Reek would emit the following warning:

test.rb -- 1 warning:
  [2, 3, 4]:Dummy takes parameters [y1, y2] to 3 methods (DataClump)

A possible way to fix this problem (quoting from Martin Fowler):

The first step is to replace data clumps with objects and use the objects whenever you see them. An immediate benefit is that you'll shrink some parameter lists. The interesting stuff happens as you begin to look for behavior to move into the new objects.

Method resources has a Cognitive Complexity of 6 (exceeds 5 allowed). Consider refactoring.
Open

    def resources options = {}
      options = { host: Conjur.configuration.core_url, credentials: credentials }.merge options
      options[:account] ||= Conjur.configuration.account

      host, credentials, account, kind = options.values_at(*[:host, :credentials, :account, :kind])
Severity: Minor
Found in lib/conjur/api/resources.rb - About 25 mins to fix

Cognitive Complexity

Cognitive Complexity is a measure of how difficult a unit of code is to intuitively understand. Unlike Cyclomatic Complexity, which determines how difficult your code will be to test, Cognitive Complexity tells you how difficult your code will be to read and comprehend.

A method's cognitive complexity is based on a few simple rules:

  • Code is not considered more complex when it uses shorthand that the language provides for collapsing multiple statements into one
  • Code is considered more complex for each "break in the linear flow of the code"
  • Code is considered more complex when "flow breaking structures are nested"

Further reading

Conjur::BuildObject::ClassMethods#find_class doesn't depend on instance state (maybe move it to another class?)
Open

      def find_class class_name, default_class
Severity: Minor
Found in lib/conjur/build_object.rb by reek

A Utility Function is any instance method that has no dependency on the state of the instance.

Conjur::Escape::ClassMethods#fully_escape doesn't depend on instance state (maybe move it to another class?)
Open

      def fully_escape(str)
Severity: Minor
Found in lib/conjur/escape.rb by reek

A Utility Function is any instance method that has no dependency on the state of the instance.

Conjur::API::TokenExpiration#gettime doesn't depend on instance state (maybe move it to another class?)
Open

      def gettime
Severity: Minor
Found in lib/conjur/base.rb by reek

A Utility Function is any instance method that has no dependency on the state of the instance.

Conjur::HostFactoryToken#to_json has unused parameter 'options'
Open

    def to_json(options = {})
Severity: Minor
Found in lib/conjur/host_factory_token.rb by reek

Unused Parameter refers to methods with parameters that are unused in scope of the method.

Having unused parameters in a method is code smell because leaving dead code in a method can never improve the method and it makes the code confusing to read.

Example

Given:

class Klass
  def unused_parameters(x,y,z)
    puts x,y # but not z
  end
end

Reek would emit the following warning:

[2]:Klass#unused_parameters has unused parameter 'z' (UnusedParameters)

RestClient::Resource#to_json has unused parameter 'options'
Open

  def to_json(options = {})
Severity: Minor
Found in lib/conjur/api.rb by reek

Unused Parameter refers to methods with parameters that are unused in scope of the method.

Having unused parameters in a method is code smell because leaving dead code in a method can never improve the method and it makes the code confusing to read.

Example

Given:

class Klass
  def unused_parameters(x,y,z)
    puts x,y # but not z
  end
end

Reek would emit the following warning:

[2]:Klass#unused_parameters has unused parameter 'z' (UnusedParameters)

Conjur::BaseCache#fetch_attributes has unused parameter 'cache_key'
Open

    def fetch_attributes cache_key, &block
Severity: Minor
Found in lib/conjur/cache.rb by reek

Unused Parameter refers to methods with parameters that are unused in scope of the method.

Having unused parameters in a method is code smell because leaving dead code in a method can never improve the method and it makes the code confusing to read.

Example

Given:

class Klass
  def unused_parameters(x,y,z)
    puts x,y # but not z
  end
end

Reek would emit the following warning:

[2]:Klass#unused_parameters has unused parameter 'z' (UnusedParameters)

Conjur::BaseObject#as_json has unused parameter 'options'
Open

    def as_json options={}
Severity: Minor
Found in lib/conjur/base_object.rb by reek

Unused Parameter refers to methods with parameters that are unused in scope of the method.

Having unused parameters in a method is code smell because leaving dead code in a method can never improve the method and it makes the code confusing to read.

Example

Given:

class Klass
  def unused_parameters(x,y,z)
    puts x,y # but not z
  end
end

Reek would emit the following warning:

[2]:Klass#unused_parameters has unused parameter 'z' (UnusedParameters)

Conjur::Id#as_json has unused parameter 'options'
Open

    def as_json options={}
Severity: Minor
Found in lib/conjur/id.rb by reek

Unused Parameter refers to methods with parameters that are unused in scope of the method.

Having unused parameters in a method is code smell because leaving dead code in a method can never improve the method and it makes the code confusing to read.

Example

Given:

class Klass
  def unused_parameters(x,y,z)
    puts x,y # but not z
  end
end

Reek would emit the following warning:

[2]:Klass#unused_parameters has unused parameter 'z' (UnusedParameters)

Conjur::HasAttributes#annotations has the variable name 'e'
Open

      Hash[(attributes['annotations']||{}).collect {|e| [e['name'],e['value']]}]
Severity: Minor
Found in lib/conjur/has_attributes.rb by reek

An Uncommunicative Variable Name is a variable name that doesn't communicate its intent well enough.

Poor names make it hard for the reader to build a mental picture of what's going on in the code. They can also be mis-interpreted; and they hurt the flow of reading, because the reader must slow down to interpret the names.

Conjur::API#credentials has the variable name 'h'
Open

      headers = {}.tap do |h|
Severity: Minor
Found in lib/conjur/base.rb by reek

An Uncommunicative Variable Name is a variable name that doesn't communicate its intent well enough.

Poor names make it hard for the reader to build a mental picture of what's going on in the code. They can also be mis-interpreted; and they hurt the flow of reading, because the reader must slow down to interpret the names.

Conjur::API#resources has the variable name 'r'
Open

          resource(result['id']).tap do |r|
Severity: Minor
Found in lib/conjur/api/resources.rb by reek

An Uncommunicative Variable Name is a variable name that doesn't communicate its intent well enough.

Poor names make it hard for the reader to build a mental picture of what's going on in the code. They can also be mis-interpreted; and they hurt the flow of reading, because the reader must slow down to interpret the names.

Severity
Category
Status
Source
Language