Remove TODOs from codebase

.codeclimate.yml

@@ -67,7 +67,7 @@ plugins:
     - '.codeclimate.yml'
     config:
       strings:
-      # Removed TODO from this list, as we want to allow TODOs in the codebase
+      - TODO
       - FIXME
       - HACK
       - BUG

app/controllers/concerns/user_session_context.rb

@@ -5,7 +5,6 @@ def context
     user_session[:context] || DEFAULT_CONTEXT
   end
 
-  # TODO: Figure out better names for this and the method below
   def initial_authentication_context?
     context == DEFAULT_CONTEXT
   end

app/forms/openid_connect_token_form.rb

@@ -96,7 +96,6 @@ def validate_client_assertion
                                    sub: client_id, verify_sub: true)
     validate_aud_claim(payload)
   rescue JWT::DecodeError => err
-    # TODO: i18n these JWT gem error messages
     errors.add(:client_assertion, err.message)
   end
 

app/javascript/packs/personal-key-page-controller.js

@@ -24,7 +24,6 @@ const personalKey = scrapePersonalKey();
 
 // The following methods are strictly fallbacks for IE < 11. There is limited
 // support for HTML5 validation attributes in those browsers
-// TODO: Potentially investigate readding client-side JS errors in a robust way
 function setInvalidHTML() {
   if (isInvalidForm) return;
 

app/services/piv_cac_service.rb

@@ -75,8 +75,6 @@ def decode_request(uri, token)
     end
 
     def authenticate(token)
-      # TODO: make this secret required once we have everything deployed and configured
-      # The piv/cac service side is pending, so this is not critical yet.
       secret = Figaro.env.piv_cac_verify_token_secret
       return '' if secret.blank?
       nonce = SecureRandom.hex(10)

config/application.yml.example

@@ -201,10 +201,6 @@ development:
 # These values serve as defaults for all production-like environments, which
 # includes *.identitysandbox.gov and *.login.gov.
 #
-# TODO: remove empty/fake values from this block, which create the misleading
-# impression that these values aren't used. In fact they will be used unless
-# they are overriden by keys with the same name in the application.yml in the
-# app secrets bucket.
 production:
   aamva_cert_enabled: 'true'
   aamva_public_key: # Base64 encoded public key for AAMVA

spec/features/flows/sp_authentication_flows_spec.rb

@@ -183,10 +183,6 @@
               end
             end
           end
-
-          # context 'when choosing to sign in' do
-          #   TODO: duplicate scenarios from Create Account here
-          # end
         end
 
         context 'when LOA1' do

spec/features/two_factor_authentication/sign_in_spec.rb

@@ -621,7 +621,6 @@ def submit_prefilled_otp_code
     end
   end
 
-  # TODO: readd profile redirect, modal tests
   describe 'signing in when user does not already have personal key' do
     # For example, when migrating users from another DB
     it 'displays personal key and redirects to profile' do

spec/lib/worker_health_checker_spec.rb

@@ -12,7 +12,6 @@
   end
 
   def create_sidekiq_queues(*queues)
-    # TODO: find an API to use rather than manually mess with redis?
     Sidekiq.redis do |redis|
       queues.each do |queue|
         redis.sadd('queues', queue)