RubyGems Authentication

Implementation plan (2 MRs)

• Create a skeleton of the API that includes all routes, returning 404 in all responses.
• Add logic for authentication.
  • We should have users save their PATs and/or other tokens in the ~/.gem/credentials file as outlined at the bottom of the notes. This prevents confusion with the login prompt of "email", and also will be helpful when we use CI, we can generate this file and add the CI_JOB_TOKEN directly. Routes should return 401 if unauthorized, and 404 if authorized.

References

• A summary of all routes are listed here: #216517 (comment 485886685)
• Authentication notes are here: #216517 (comment 484929459)

• Main RubyGems issue: #803
• Investigation issue: #216517 (closed)