shopify_app 13.4.0 → 13.4.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- checksums.yaml +4 -4
- data/.github/PULL_REQUEST_TEMPLATE.md +6 -0
- data/CHANGELOG.md +4 -0
- data/app/controllers/shopify_app/callback_controller.rb +2 -2
- data/lib/shopify_app/version.rb +1 -1
- data/package-lock.json +4 -72
- data/package.json +1 -1
- data/shopify_app.gemspec +1 -1
- data/yarn.lock +3 -3
- metadata +5 -4
checksums.yaml
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
---
|
|
2
2
|
SHA256:
|
|
3
|
-
metadata.gz:
|
|
4
|
-
data.tar.gz:
|
|
3
|
+
metadata.gz: b658d15c37ab3bf556566d5608a0b778a9f72448c4e8cdc6363c52e31dcf5ff5
|
|
4
|
+
data.tar.gz: 42c4e4dd1377bbdbb8b627f5a56b81c58559133158f1d0c7cc212aff2e7da634
|
|
5
5
|
SHA512:
|
|
6
|
-
metadata.gz:
|
|
7
|
-
data.tar.gz:
|
|
6
|
+
metadata.gz: 9753dddbdda3d31395e154f640bc4043312b160c72140525c32f839b96498db1bfae024daab4027b1b003b7206a7ba47106338369240e9437ac060682e594290
|
|
7
|
+
data.tar.gz: d5f6fb4fe5c753280b7c3d0d3f8b58b152ce395c19f6cc6131e63e90aa233e95abfbe2598b418d6828586462eb9e7cb48ab7bad0ccdeacc71b5445a83c6aa70e
|
|
@@ -0,0 +1,6 @@
|
|
|
1
|
+
Before submitting the PR, please consider if any of the following are needed:
|
|
2
|
+
|
|
3
|
+
- [ ] Update `CHANGELOG.md` if the changes would impact users
|
|
4
|
+
- [ ] Update `README.md`, if appropriate.
|
|
5
|
+
- [ ] Update any relevant pages in `docs/`, if necessary
|
|
6
|
+
- [ ] For security fixes, the [Disclosure Policy](https://github.com/Shopify/shopify_app/blob/master/SECURITY.md#disclosure-policy) must be followed.
|
data/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,7 @@
|
|
|
1
|
+
13.4.1
|
|
2
|
+
------
|
|
3
|
+
* Fix the version checks for the dependency on `shopify_api` to allow all of v9.X
|
|
4
|
+
|
|
1
5
|
13.4.0
|
|
2
6
|
------
|
|
3
7
|
* Skip CSRF protection if a valid signed JWT token is present as we trust Shopify to be the only source that can sign it securely. [#994](https://github.com/Shopify/shopify_app/pull/994)
|
|
@@ -65,9 +65,9 @@ module ShopifyApp
|
|
|
65
65
|
end
|
|
66
66
|
|
|
67
67
|
def associated_user
|
|
68
|
-
return unless auth_hash
|
|
68
|
+
return unless auth_hash.dig('extra', 'associated_user').present?
|
|
69
69
|
|
|
70
|
-
auth_hash['extra']['associated_user']
|
|
70
|
+
auth_hash['extra']['associated_user'].merge('scope' => auth_hash['extra']['associated_user_scope'])
|
|
71
71
|
end
|
|
72
72
|
|
|
73
73
|
def associated_user_id
|
data/lib/shopify_app/version.rb
CHANGED
data/package-lock.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "shopify_app",
|
|
3
|
-
"version": "13.
|
|
3
|
+
"version": "13.4.0",
|
|
4
4
|
"lockfileVersion": 1,
|
|
5
5
|
"requires": true,
|
|
6
6
|
"dependencies": {
|
|
@@ -53,12 +53,6 @@
|
|
|
53
53
|
"minimist": "^1.2.0"
|
|
54
54
|
}
|
|
55
55
|
},
|
|
56
|
-
"lodash": {
|
|
57
|
-
"version": "4.17.15",
|
|
58
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
59
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
60
|
-
"dev": true
|
|
61
|
-
},
|
|
62
56
|
"ms": {
|
|
63
57
|
"version": "2.1.2",
|
|
64
58
|
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
|
|
@@ -78,14 +72,6 @@
|
|
|
78
72
|
"lodash": "^4.17.13",
|
|
79
73
|
"source-map": "^0.5.0",
|
|
80
74
|
"trim-right": "^1.0.1"
|
|
81
|
-
},
|
|
82
|
-
"dependencies": {
|
|
83
|
-
"lodash": {
|
|
84
|
-
"version": "4.17.15",
|
|
85
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
86
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
87
|
-
"dev": true
|
|
88
|
-
}
|
|
89
75
|
}
|
|
90
76
|
},
|
|
91
77
|
"@babel/helper-annotate-as-pure": {
|
|
@@ -151,14 +137,6 @@
|
|
|
151
137
|
"@babel/helper-function-name": "^7.1.0",
|
|
152
138
|
"@babel/types": "^7.5.5",
|
|
153
139
|
"lodash": "^4.17.13"
|
|
154
|
-
},
|
|
155
|
-
"dependencies": {
|
|
156
|
-
"lodash": {
|
|
157
|
-
"version": "4.17.15",
|
|
158
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
159
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
160
|
-
"dev": true
|
|
161
|
-
}
|
|
162
140
|
}
|
|
163
141
|
},
|
|
164
142
|
"@babel/helper-explode-assignable-expression": {
|
|
@@ -230,14 +208,6 @@
|
|
|
230
208
|
"@babel/template": "^7.4.4",
|
|
231
209
|
"@babel/types": "^7.5.5",
|
|
232
210
|
"lodash": "^4.17.13"
|
|
233
|
-
},
|
|
234
|
-
"dependencies": {
|
|
235
|
-
"lodash": {
|
|
236
|
-
"version": "4.17.15",
|
|
237
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
238
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
239
|
-
"dev": true
|
|
240
|
-
}
|
|
241
211
|
}
|
|
242
212
|
},
|
|
243
213
|
"@babel/helper-optimise-call-expression": {
|
|
@@ -262,14 +232,6 @@
|
|
|
262
232
|
"dev": true,
|
|
263
233
|
"requires": {
|
|
264
234
|
"lodash": "^4.17.13"
|
|
265
|
-
},
|
|
266
|
-
"dependencies": {
|
|
267
|
-
"lodash": {
|
|
268
|
-
"version": "4.17.15",
|
|
269
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
270
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
271
|
-
"dev": true
|
|
272
|
-
}
|
|
273
235
|
}
|
|
274
236
|
},
|
|
275
237
|
"@babel/helper-remap-async-to-generator": {
|
|
@@ -598,14 +560,6 @@
|
|
|
598
560
|
"requires": {
|
|
599
561
|
"@babel/helper-plugin-utils": "^7.0.0",
|
|
600
562
|
"lodash": "^4.17.13"
|
|
601
|
-
},
|
|
602
|
-
"dependencies": {
|
|
603
|
-
"lodash": {
|
|
604
|
-
"version": "4.17.15",
|
|
605
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
606
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
607
|
-
"dev": true
|
|
608
|
-
}
|
|
609
563
|
}
|
|
610
564
|
},
|
|
611
565
|
"@babel/plugin-transform-classes": {
|
|
@@ -1056,12 +1010,6 @@
|
|
|
1056
1010
|
"ms": "^2.1.1"
|
|
1057
1011
|
}
|
|
1058
1012
|
},
|
|
1059
|
-
"lodash": {
|
|
1060
|
-
"version": "4.17.15",
|
|
1061
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
1062
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
1063
|
-
"dev": true
|
|
1064
|
-
},
|
|
1065
1013
|
"ms": {
|
|
1066
1014
|
"version": "2.1.2",
|
|
1067
1015
|
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
|
|
@@ -1079,14 +1027,6 @@
|
|
|
1079
1027
|
"esutils": "^2.0.2",
|
|
1080
1028
|
"lodash": "^4.17.13",
|
|
1081
1029
|
"to-fast-properties": "^2.0.0"
|
|
1082
|
-
},
|
|
1083
|
-
"dependencies": {
|
|
1084
|
-
"lodash": {
|
|
1085
|
-
"version": "4.17.15",
|
|
1086
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
1087
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
1088
|
-
"dev": true
|
|
1089
|
-
}
|
|
1090
1030
|
}
|
|
1091
1031
|
},
|
|
1092
1032
|
"@sinonjs/commons": {
|
|
@@ -1117,14 +1057,6 @@
|
|
|
1117
1057
|
"@sinonjs/commons": "^1.3.0",
|
|
1118
1058
|
"array-from": "^2.1.1",
|
|
1119
1059
|
"lodash": "^4.17.15"
|
|
1120
|
-
},
|
|
1121
|
-
"dependencies": {
|
|
1122
|
-
"lodash": {
|
|
1123
|
-
"version": "4.17.15",
|
|
1124
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
|
1125
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
|
1126
|
-
"dev": true
|
|
1127
|
-
}
|
|
1128
1060
|
}
|
|
1129
1061
|
},
|
|
1130
1062
|
"@sinonjs/text-encoding": {
|
|
@@ -4579,9 +4511,9 @@
|
|
|
4579
4511
|
}
|
|
4580
4512
|
},
|
|
4581
4513
|
"lodash": {
|
|
4582
|
-
"version": "4.17.
|
|
4583
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.
|
|
4584
|
-
"integrity": "sha512-
|
|
4514
|
+
"version": "4.17.19",
|
|
4515
|
+
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
|
|
4516
|
+
"integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
|
|
4585
4517
|
"dev": true
|
|
4586
4518
|
},
|
|
4587
4519
|
"log-symbols": {
|
data/package.json
CHANGED
data/shopify_app.gemspec
CHANGED
|
@@ -15,7 +15,7 @@ Gem::Specification.new do |s|
|
|
|
15
15
|
|
|
16
16
|
s.add_runtime_dependency('browser_sniffer', '~> 1.2.2')
|
|
17
17
|
s.add_runtime_dependency('rails', '> 5.2.1')
|
|
18
|
-
s.add_runtime_dependency('shopify_api', '~> 9.1
|
|
18
|
+
s.add_runtime_dependency('shopify_api', '~> 9.1')
|
|
19
19
|
s.add_runtime_dependency('omniauth-shopify-oauth2', '~> 2.2.2')
|
|
20
20
|
s.add_runtime_dependency('jwt', '~> 2.2.1')
|
|
21
21
|
s.add_runtime_dependency('redirect_safely', '~> 1.0')
|
data/yarn.lock
CHANGED
|
@@ -3202,9 +3202,9 @@ locate-path@^3.0.0:
|
|
|
3202
3202
|
path-exists "^3.0.0"
|
|
3203
3203
|
|
|
3204
3204
|
lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15:
|
|
3205
|
-
version "4.17.
|
|
3206
|
-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.
|
|
3207
|
-
integrity sha512-
|
|
3205
|
+
version "4.17.19"
|
|
3206
|
+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
|
|
3207
|
+
integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
|
|
3208
3208
|
|
|
3209
3209
|
log-symbols@2.2.0:
|
|
3210
3210
|
version "2.2.0"
|
metadata
CHANGED
|
@@ -1,14 +1,14 @@
|
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
|
2
2
|
name: shopify_app
|
|
3
3
|
version: !ruby/object:Gem::Version
|
|
4
|
-
version: 13.4.
|
|
4
|
+
version: 13.4.1
|
|
5
5
|
platform: ruby
|
|
6
6
|
authors:
|
|
7
7
|
- Shopify
|
|
8
8
|
autorequire:
|
|
9
9
|
bindir: bin
|
|
10
10
|
cert_chain: []
|
|
11
|
-
date: 2020-
|
|
11
|
+
date: 2020-07-16 00:00:00.000000000 Z
|
|
12
12
|
dependencies:
|
|
13
13
|
- !ruby/object:Gem::Dependency
|
|
14
14
|
name: browser_sniffer
|
|
@@ -44,14 +44,14 @@ dependencies:
|
|
|
44
44
|
requirements:
|
|
45
45
|
- - "~>"
|
|
46
46
|
- !ruby/object:Gem::Version
|
|
47
|
-
version: 9.1
|
|
47
|
+
version: '9.1'
|
|
48
48
|
type: :runtime
|
|
49
49
|
prerelease: false
|
|
50
50
|
version_requirements: !ruby/object:Gem::Requirement
|
|
51
51
|
requirements:
|
|
52
52
|
- - "~>"
|
|
53
53
|
- !ruby/object:Gem::Version
|
|
54
|
-
version: 9.1
|
|
54
|
+
version: '9.1'
|
|
55
55
|
- !ruby/object:Gem::Dependency
|
|
56
56
|
name: omniauth-shopify-oauth2
|
|
57
57
|
requirement: !ruby/object:Gem::Requirement
|
|
@@ -243,6 +243,7 @@ files:
|
|
|
243
243
|
- ".babelrc"
|
|
244
244
|
- ".github/CODEOWNERS"
|
|
245
245
|
- ".github/ISSUE_TEMPLATE.md"
|
|
246
|
+
- ".github/PULL_REQUEST_TEMPLATE.md"
|
|
246
247
|
- ".github/probots.yml"
|
|
247
248
|
- ".github/workflows/rubocop.yml"
|
|
248
249
|
- ".gitignore"
|