The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point in your pull request via creating an issue comment (i.e. comment on the pull request page) using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

cmd/internal/migrations/v3/common.go (2)

1012-1014: Broaden KeyLookup matching to support raw and backtick-quoted strings (optional hardening)

reKeyLookup only matches double-quoted literals, missing backtick-quoted values and any non-literal forms. Consider extending the pattern to support backticks for robustness. If you want to keep the current simplicity, at minimum document that only double-quoted KeyLookup values are migrated.

Example pattern accommodating backticks:

-    reKeyLookup := regexp.MustCompile(`(?m)(\s*)KeyLookup:\s*("[^"]+")(,?)(\n?)`)
+    // Supports "..." and `...` forms
+    reKeyLookup := regexp.MustCompile("(?m)(\\s*)KeyLookup:\\s*((?:\"(?:[^\"\\\\]|\\\\.)+\"|`[^`]+`))\\s*(,?)(\\n?)")

Note: using a double-quoted Go string for the regex avoids embedding backticks inside a raw string.

---

1060-1064: Unknown KeyLookup source drops all sources; consider partial migration (optional)

On encountering an unrecognized source, the implementation removes both AuthScheme and KeyLookup entirely, discarding any recognized sources in the list. If feasibility allows, consider skipping only the unknown entry and migrating the known ones instead to maximize safe auto-fix coverage.

cmd/internal/migrations/v3/common_test.go (3)

1303-1328: Add a test for variable-based AuthScheme to prevent regressions

Coverage is solid for literals. Add a case where AuthScheme is an identifier (e.g., const or var) to ensure it’s preserved without being turned into a string literal.

Example test to add:

func Test_MigrateKeyAuthConfig_HeaderAuth_VarScheme(t *testing.T) {
	t.Parallel()

	dir, err := os.MkdirTemp("", "mkeyauth_header_var")
	require.NoError(t, err)
	defer func() { require.NoError(t, os.RemoveAll(dir)) }()

	file := writeTempFile(t, dir, `package main
import "github.com/gofiber/fiber/v2/middleware/keyauth"
const myScheme = "Bearer"
var _ = keyauth.New(keyauth.Config{
    KeyLookup: "header:Authorization",
    AuthScheme: myScheme,
})`)

	var buf bytes.Buffer
	cmd := newCmd(&buf)
	require.NoError(t, v3.MigrateKeyAuthConfig(cmd, dir, nil, nil))

	content := readFile(t, file)
	assert.NotContains(t, content, "KeyLookup")
	assert.NotContains(t, content, "AuthScheme")
	assert.Contains(t, content, `Extractor: keyauth.FromAuthHeader("Authorization", myScheme)`)
	assert.Contains(t, buf.String(), "Migrating keyauth middleware configs")
}

---

1352-1373: Consider adding tests for param and form sources

You already cover header, cookie, and chained sources. Include param: and form: to fully exercise all supported extractors.

Example:

func Test_MigrateKeyAuthConfig_ParamAndForm(t *testing.T) {
	t.Parallel()
	dir, err := os.MkdirTemp("", "mkeyauth_param_form")
	require.NoError(t, err)
	defer func() { require.NoError(t, os.RemoveAll(dir)) }()

	file := writeTempFile(t, dir, `package main
import "github.com/gofiber/fiber/v2/middleware/keyauth"
var _ = keyauth.New(keyauth.Config{
    KeyLookup: "param:id,form:token",
})`)

	var buf bytes.Buffer
	cmd := newCmd(&buf)
	require.NoError(t, v3.MigrateKeyAuthConfig(cmd, dir, nil, nil))

	content := readFile(t, file)
	assert.NotContains(t, content, "KeyLookup")
	assert.Contains(t, content, `Extractor: keyauth.Chain(keyauth.FromParam("id"), keyauth.FromForm("token"))`)
	assert.Contains(t, buf.String(), "Migrating keyauth middleware configs")
}

---

1330-1350: Optional: add a default-scheme test (no AuthScheme provided)

To lock in the "Bearer" default behavior, add a case where AuthScheme is omitted and header:Authorization is used.

Example:

func Test_MigrateKeyAuthConfig_HeaderAuth_DefaultScheme(t *testing.T) {
	t.Parallel()
	dir, err := os.MkdirTemp("", "mkeyauth_header_default")
	require.NoError(t, err)
	defer func() { require.NoError(t, os.RemoveAll(dir)) }()

	file := writeTempFile(t, dir, `package main
import "github.com/gofiber/fiber/v2/middleware/keyauth"
var _ = keyauth.New(keyauth.Config{
    KeyLookup: "header:Authorization",
})`)

	var buf bytes.Buffer
	cmd := newCmd(&buf)
	require.NoError(t, v3.MigrateKeyAuthConfig(cmd, dir, nil, nil))

	content := readFile(t, file)
	assert.Contains(t, content, `Extractor: keyauth.FromAuthHeader("Authorization", "Bearer")`)
	assert.Contains(t, buf.String(), "Migrating keyauth middleware configs")
}

Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro

💡 Knowledge Base configuration:

• MCP integration is disabled by default for public repositories
• Jira integration is disabled by default for public repositories
• Linear integration is disabled by default for public repositories

You can enable these settings in your CodeRabbit configuration.