Class: RuboCop::Cop::Sequra::NoSidekiqPerformStubs

Inherits:
Base
  • Object
show all
Defined in:
lib/rubocop/cop/sequra/no_sidekiq_perform_stubs.rb

Overview

Detects RSpec stubs and spy assertions on Sidekiq enqueue methods (‘perform_async`, `perform_at`, `perform_in`).

Stubbing these methods bypasses ‘Sidekiq.strict_args!` validation, which lets symbol-keyed hashes (and other non-JSON-native types) slip through unchecked. The same code would raise `ArgumentError` in production at enqueue time, and the bug only surfaces when the job actually runs — by which point retries, timing windows, and rescue-swallowers can mask the failure. This pattern caused a silent push-notification drop in COR-1923.

Use ‘have_enqueued_sidekiq_job` (or `change(SomeJob.jobs, :size)`) instead. Both go through Sidekiq’s client middleware chain, so ‘strict_args!` validates the arguments as it would in production.

‘.and_call_original` is exempt: the stub spies on the call but then runs the real `perform_*`, which still exercises the serialization contract.

Examples:

# bad - stub bypasses strict_args! validation
allow(SomeJob).to receive(:perform_async)

# bad - even with arg matchers, the real enqueue is suppressed
expect(SomeJob).to receive(:perform_at).with(time, data)

# bad - negative assertion still bypasses the contract
expect(SomeJob).not_to receive(:perform_async)

# bad - spy verification on a stubbed enqueue
expect(SomeJob).to have_received(:perform_async).with(id)

# good - exercises strict_args! through Sidekiq's middleware
expect(SomeJob).to have_enqueued_sidekiq_job(id, name: "value")

# good - state-based assertion, also exercises the middleware
expect { subject }.to change(SomeJob.jobs, :size).by(1)

# good - escape hatch: spy AND run the real method
expect(SomeJob).to receive(:perform_async).and_call_original

Constant Summary collapse

MSG = 
"Avoid stubbing Sidekiq enqueue methods (`perform_async`/`perform_at`/`perform_in`). " \
"Stubs bypass `Sidekiq.strict_args!` validation and can hide symbol-keyed hash bugs " \
"(see COR-1923). Use `have_enqueued_sidekiq_job` or `change(Job.jobs, :size)` instead. " \
"Use `.and_call_original` only as an escape hatch.".freeze

Instance Method Summary collapse

Instance Method Details

#on_send(node) ⇒ Object 



55
56
57
58
59
60
 
# File 'lib/rubocop/cop/sequra/no_sidekiq_perform_stubs.rb', line 55

def on_send(node)
  return unless perform_method_stub?(node)
  return if chained_with_call_original?(node)

  add_offense(node)
end