Add support for YubiKey OTP codes during release

This patch adds support for automatically getting OTP codes from your YubiKey during release. You must have the `ykman` commandline tool installed, and have two accounts setup with the names `rubygems.org` and `npmjs.com`. For example, the output from `ykman oath accounts list` on my machine is this: ``` $ ykman oath accounts list npmjs.com:[email protected] rubygems.org:[email protected] ``` If you meet these conditions, you can do `rake release` without typing an OTP code for every gem. If no `ykman` tool is found on your system, this will just fall back to asking for an OTP code.
xnzac · Dec 14, 2021 · 8f83351 · 8f83351
1 parent 0fccfb9
commit 8f83351
Showing 1 changed file with 16 additions and 2 deletions.
diff --git a/tasks/release.rb b/tasks/release.rb
@@ -99,12 +99,26 @@
     end
 
     task push: :build do
-      sh "gem push #{gem}"
+      otp = ""
+      begin
+        otp = " --otp " + `ykman oath accounts code -s rubygems.org`.chomp
+      rescue
+        # User doesn't have ykman
+      end
+
+      sh "gem push #{gem}#{otp}"
 
       if File.exist?("#{framework}/package.json")
         Dir.chdir("#{framework}") do
           npm_tag = /[a-z]/.match?(version) ? "pre" : "latest"
-          sh "npm publish --tag #{npm_tag}"
+          npm_otp = ""
+          begin
+            npm_otp = " --otp " + `ykman oath accounts code -s npmjs.com`.chomp
+          rescue
+            # User doesn't have ykman
+          end
+
+          sh "npm publish --tag #{npm_tag}#{npm_otp}"
         end
       end
     end