shopify_app 7.2.0 → 8.5.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
-SHA1:
-  metadata.gz: 47504ce67fc91bae133ac9451f21eb46b2307f6b
-  data.tar.gz: 1c9430ae87f14834389188ea630a43574e1d31c4
+SHA256:
+  metadata.gz: 8fe2949f5e38db4532dbcab3c05f96e228e6285fdbb4b729ffefecd8e40b2aad
+  data.tar.gz: 2fefc3ce45bc58cd82c874d5217f6abfce0a70ba56cb9105084dbec011f033cb
 SHA512:
-  metadata.gz: dce462b93f79c591d00801bf8eaedec76be7fcee1aa65184d6d2cad28480c438c92b2b4e1239382225f7782eb62bf735f941ca1c6bed166b0a016a4b7ca9d055
-  data.tar.gz: f5e656f7f0c720daa423d20dea3bddc47439e556713d6bfa8cca030ef12617ac64bbdeedb4541dd85dc311b229231662635f1ea6994b18ed761806d18a24207a
+  metadata.gz: 1a435b2541e5198fad47a247a97b2a68ce6e741b2b29a4b0b7f2cc29d256fc382a7fd8a56801e982744258e9efdfd3879a13dd4dffc033c88d432ce44d525e44
+  data.tar.gz: 1df140b61ca82e090eba2fcabac5f079cc5d87e7cb64bab657cbc725ff1063360fbd88822d4ed76c9224d2fd4e9429ba197dd3c7f6a6312b3c8dbdb060c35f26

data/.babelrc

@@ -0,0 +1,5 @@
+{
+  "babel": {
+    "presets": ["shopify/web"]
+  }
+}

data/.github/CODEOWNERS

@@ -0,0 +1 @@
+*       @shopify/platform-dev-tools-education

data/.github/probots.yml

@@ -0,0 +1,2 @@
+enabled:
+  - cla

data/.gitignore

@@ -9,3 +9,8 @@ doc/
 *.sqlite3
 test/tmp/*
 .idea
+# ignore sprockets cache
+/test/dummy/tmp/*
+/node_modules/
+.byebug_history
+

data/.nvmrc

@@ -0,0 +1 @@
+8.10.0

data/.rubocop.yml

@@ -0,0 +1,10 @@
+inherit_from:
+  - https://shopify.github.io/ruby-style-guide/rubocop.yml
+
+LineLength:
+  Exclude:
+    - test/**/*
+
+Metrics/ClassLength:
+  Exclude:
+    - test/**/*

data/.ruby-version

@@ -0,0 +1 @@
+2.5.0

data/.travis.yml

@@ -1,17 +1,29 @@
+sudo: required
+dist: trusty
+addons:
+    chrome: stable
+before_script:
+    - "sudo chown root /opt/google/chrome/chrome-sandbox"
+    - "sudo chmod 4755 /opt/google/chrome/chrome-sandbox"
 language: ruby
-cache: bundler
-sudo: false
+before_install:
+  - gem update --system
+cache:
+  bundler: true
+  directories:
+    - node_modules
+  yarn: true
 
 rvm:
-  - 2.3.1
+  - 2.3.6
+  - 2.4.3
+  - 2.5.0
 
-gemfile:
-  - Gemfile
-  - Gemfile.rails50
+install:
+  - bundle install
+  - nvm install node
+  - yarn
 
-matrix:
-  include:
-  - rvm: 2.2.2
-    gemfile: Gemfile.ruby22
-  - rvm: 2.2.2
-    gemfile: Gemfile.ruby22.rails50
+script:
+  - yarn test
+  - bundle exec rake test

data/CHANGELOG.md

@@ -1,3 +1,154 @@
+8.5.0
+-----
+Added support for rotating Shopify access tokens:
+
+* Added a generator shopify_app:rotate_shopify_token_job for generating the job to perform token rotation
+* Extend Shopify app configuration to support a new and old secret token
+* Extended webhook validation code to support validating against new and old secret tokens
+* See the README for more details: https://github.com/Shopify/shopify_app#rotateshopifytokenjob
+
+8.4.2
+-----
+* Clear stale user session during auth callback
+
+8.4.1
+-----
+* Update README and Releasing.md
+* Allow user agent to not be set
+* Remove legacy EASDK examples
+* Add .ruby-version file
+* Clean up omniauth setup and fix examples
+* Fix infinite redirect loops if users have disabled 3rd party cookies in their browser
+
+8.4.0
+----
+* Fix embedded app session management in Safari 12.1
+* Shop names passed to OAuth are no longer case sensitive
+
+8.3.2
+----
+* Removes `read_orders` from the default scopes provided upon app generation
+
+8.3.1
+----
+* Adds the ability to customize the login URL through the initializer
+
+8.3.0
+----
+* Fix embedded app session management in Safari 12
+* Add support for translation platform
+
+8.2.6
+----
+* Sanitize the shop query param to include `.myshopify.com` if no domain was provided
+
+8.2.5
+----
+* fix iframe headers on session controller
+
+8.2.4
+-----
+* Add CSRF protection through `protect_from_forgery with: :exception` on `ShopifyApp::AuthenticatedController`
+
+8.2.3
+-----
+* Send head :forbidden instead of :unauthorized when AppProxyVerification fails
+
+8.2.2
+-----
+* Changes how the ESDK concern allows iframes. Fixes an issue with the first request for some people
+
+8.2.1
+-----
+* Bugfix: Don't logout shops from `login_again_if_different_shop` when Rails
+  params for a 'Shop' model are passed in [[#477]](https://github.com/Shopify/shopify_app/pull/477)
+
+8.2.0
+-----
+Known bug: Shop logged out when submitting a form for 'Shop' objects, fixed in 8.2.1 [[See #480 for details]](https://github.com/Shopify/shopify_app/issues/480)
+
+* Add `webhook_jobs_namespace` config option. [[#463]](https://github.com/Shopify/shopify_app/pull/463)
+* Updates login page styles to match the [Polaris](https://polaris.shopify.com/) design system. [[#474]](https://github.com/Shopify/shopify_app/pull/474)
+
+8.1.0
+-----
+Known bug: Shop logged out when submitting a form for 'Shop' objects, fixed in 8.2.1 [[See #480 for details]](https://github.com/Shopify/shopify_app/issues/480)
+
+* Add support for per_user_authentication
+* Pass the shop param in the session for authentication instead of a url param (prevents csrf). If you are upgrading from an older version of the gem you will need to update your omniauth.rb initializer file. Check the example app for what it what it should look like.
+
+8.0.0
+-----
+Known bug: Shop logged out when submitting a form for 'Shop' objects, fixed in 8.2.1 [[See #480 for details]](https://github.com/Shopify/shopify_app/issues/480)
+
+* Removed the `shopify_session_repository` initializer. The SessionRepository is now configured through the main ShopifyApp configuration object and the generated initializer
+* Moved InMemorySessionStore into the ShopifyApp namespace
+* Remove ShopifySession concern. This module made the code internal to this engine harder to follow and we want to discourage over-writing the auth code now that we have generic hooks for all extra tasks during install.
+* Changed engine controllers to subclass ActionController::Base to avoid any possible conflict with the parent application
+* Removed the `ShopifyApp::Shop` concern and added its methods to `ShopifyApp::SessionStorage`. To update for this change just remove this concern anywhere it is being used in your application.
+* Add `ShopifyApp::EmbeddedApp` controller concern which handles setting the required headers for the ESDK. Previously this was done by injecting configuration into applicaton.rb which affects the entire app.
+* Add webhooks to generated home controller. This should help new users debug issues.
+
+7.4.0
+-----
+Known bug: Shop logged out when submitting a form for 'Shop' objects, fixed in 8.2.1 [[See #480 for details]](https://github.com/Shopify/shopify_app/issues/480)
+
+* Add an after_authenticate job which will be run once the shop is authenticated. [[#431]](https://github.com/Shopify/shopify_app/pull/432)
+
+7.3.0
+-----
+Known bug: Shop logged out when submitting a form for 'Shop' objects, fixed in 8.2.1 [[See #480 for details]](https://github.com/Shopify/shopify_app/issues/480)
+
+* Bump required omniauth-shopify-oauth2 version to 1.2.0.
+* Always expect params[:shop] to be a string.
+
+7.2.11
+-----
+* Remove 'Logged in' flash message [[#425]](https://github.com/Shopify/shopify_app/pull/425)
+
+7.2.10
+-----
+* Fix an issue with the create_shops generator template
+  [[#423]](https://github.com/Shopify/shopify_app/pull/423)
+
+7.2.9
+-----
+* Remove support for Rails 4
+  [[#417]](https://github.com/Shopify/shopify_app/pull/417)
+
+7.2.8
+-----
+* Add i18n locale param support
+  [[#409]](https://github.com/Shopify/shopify_app/pull/409)
+
+
+7.2.7
+-----
+* Require `shopify_app` `>= 4.3.2`. This version relaxes the ruby version requirement from `>= 2.3.0` to `>= 2.0`
+* Rails 5: ActionDispatch::Reloader#to_prepare is deprecated
+  [[#404]](https://github.com/Shopify/shopify_app/pull/404)
+
+7.2.6
+-----
+* Update LoginProtection#fullpage_redirect_to to get shopify domain from session
+  [[#401]](https://github.com/Shopify/shopify_app/pull/401)
+
+7.2.5
+-----
+* Update LoginProtection.redirection_javascript to work with absolute URLS
+  [[#389]](https://github.com/Shopify/shopify_app/pull/389)
+
+7.2.4
+-----
+* Fix redirect issue by sanitizing shop name on sessions#new
+
+7.2.3
+-----
+* Use postMessage to redirect parent iframe during authentication [[#366]](https://github.com/Shopify/shopify_app/pull/366)
+* Add support for dynamically generating scripttag URLs
+* Bug-fix: Update scripttags_manager_job
+* Bug-fix: `--application_name` and `--scope` generates proper Configuration even when options supplied to them contain whitespaces.
+
 7.2.0
 -----
 * Disable application layout rendering for the `/login` page

data/Gemfile

@@ -2,3 +2,5 @@ source "https://rubygems.org"
 
 # Specify your gem's dependencies in shopify_app.gemspec
 gemspec
+
+gem 'rails-controller-testing', group: :test