shopify_app 13.4.0 → 13.4.1
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.github/PULL_REQUEST_TEMPLATE.md +6 -0
- data/CHANGELOG.md +4 -0
- data/app/controllers/shopify_app/callback_controller.rb +2 -2
- data/lib/shopify_app/version.rb +1 -1
- data/package-lock.json +4 -72
- data/package.json +1 -1
- data/shopify_app.gemspec +1 -1
- data/yarn.lock +3 -3
- metadata +5 -4
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: b658d15c37ab3bf556566d5608a0b778a9f72448c4e8cdc6363c52e31dcf5ff5
|
4
|
+
data.tar.gz: 42c4e4dd1377bbdbb8b627f5a56b81c58559133158f1d0c7cc212aff2e7da634
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 9753dddbdda3d31395e154f640bc4043312b160c72140525c32f839b96498db1bfae024daab4027b1b003b7206a7ba47106338369240e9437ac060682e594290
|
7
|
+
data.tar.gz: d5f6fb4fe5c753280b7c3d0d3f8b58b152ce395c19f6cc6131e63e90aa233e95abfbe2598b418d6828586462eb9e7cb48ab7bad0ccdeacc71b5445a83c6aa70e
|
@@ -0,0 +1,6 @@
|
|
1
|
+
Before submitting the PR, please consider if any of the following are needed:
|
2
|
+
|
3
|
+
- [ ] Update `CHANGELOG.md` if the changes would impact users
|
4
|
+
- [ ] Update `README.md`, if appropriate.
|
5
|
+
- [ ] Update any relevant pages in `docs/`, if necessary
|
6
|
+
- [ ] For security fixes, the [Disclosure Policy](https://github.com/Shopify/shopify_app/blob/master/SECURITY.md#disclosure-policy) must be followed.
|
data/CHANGELOG.md
CHANGED
@@ -1,3 +1,7 @@
|
|
1
|
+
13.4.1
|
2
|
+
------
|
3
|
+
* Fix the version checks for the dependency on `shopify_api` to allow all of v9.X
|
4
|
+
|
1
5
|
13.4.0
|
2
6
|
------
|
3
7
|
* Skip CSRF protection if a valid signed JWT token is present as we trust Shopify to be the only source that can sign it securely. [#994](https://github.com/Shopify/shopify_app/pull/994)
|
@@ -65,9 +65,9 @@ module ShopifyApp
|
|
65
65
|
end
|
66
66
|
|
67
67
|
def associated_user
|
68
|
-
return unless auth_hash
|
68
|
+
return unless auth_hash.dig('extra', 'associated_user').present?
|
69
69
|
|
70
|
-
auth_hash['extra']['associated_user']
|
70
|
+
auth_hash['extra']['associated_user'].merge('scope' => auth_hash['extra']['associated_user_scope'])
|
71
71
|
end
|
72
72
|
|
73
73
|
def associated_user_id
|
data/lib/shopify_app/version.rb
CHANGED
data/package-lock.json
CHANGED
@@ -1,6 +1,6 @@
|
|
1
1
|
{
|
2
2
|
"name": "shopify_app",
|
3
|
-
"version": "13.
|
3
|
+
"version": "13.4.0",
|
4
4
|
"lockfileVersion": 1,
|
5
5
|
"requires": true,
|
6
6
|
"dependencies": {
|
@@ -53,12 +53,6 @@
|
|
53
53
|
"minimist": "^1.2.0"
|
54
54
|
}
|
55
55
|
},
|
56
|
-
"lodash": {
|
57
|
-
"version": "4.17.15",
|
58
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
59
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
60
|
-
"dev": true
|
61
|
-
},
|
62
56
|
"ms": {
|
63
57
|
"version": "2.1.2",
|
64
58
|
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
|
@@ -78,14 +72,6 @@
|
|
78
72
|
"lodash": "^4.17.13",
|
79
73
|
"source-map": "^0.5.0",
|
80
74
|
"trim-right": "^1.0.1"
|
81
|
-
},
|
82
|
-
"dependencies": {
|
83
|
-
"lodash": {
|
84
|
-
"version": "4.17.15",
|
85
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
86
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
87
|
-
"dev": true
|
88
|
-
}
|
89
75
|
}
|
90
76
|
},
|
91
77
|
"@babel/helper-annotate-as-pure": {
|
@@ -151,14 +137,6 @@
|
|
151
137
|
"@babel/helper-function-name": "^7.1.0",
|
152
138
|
"@babel/types": "^7.5.5",
|
153
139
|
"lodash": "^4.17.13"
|
154
|
-
},
|
155
|
-
"dependencies": {
|
156
|
-
"lodash": {
|
157
|
-
"version": "4.17.15",
|
158
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
159
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
160
|
-
"dev": true
|
161
|
-
}
|
162
140
|
}
|
163
141
|
},
|
164
142
|
"@babel/helper-explode-assignable-expression": {
|
@@ -230,14 +208,6 @@
|
|
230
208
|
"@babel/template": "^7.4.4",
|
231
209
|
"@babel/types": "^7.5.5",
|
232
210
|
"lodash": "^4.17.13"
|
233
|
-
},
|
234
|
-
"dependencies": {
|
235
|
-
"lodash": {
|
236
|
-
"version": "4.17.15",
|
237
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
238
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
239
|
-
"dev": true
|
240
|
-
}
|
241
211
|
}
|
242
212
|
},
|
243
213
|
"@babel/helper-optimise-call-expression": {
|
@@ -262,14 +232,6 @@
|
|
262
232
|
"dev": true,
|
263
233
|
"requires": {
|
264
234
|
"lodash": "^4.17.13"
|
265
|
-
},
|
266
|
-
"dependencies": {
|
267
|
-
"lodash": {
|
268
|
-
"version": "4.17.15",
|
269
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
270
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
271
|
-
"dev": true
|
272
|
-
}
|
273
235
|
}
|
274
236
|
},
|
275
237
|
"@babel/helper-remap-async-to-generator": {
|
@@ -598,14 +560,6 @@
|
|
598
560
|
"requires": {
|
599
561
|
"@babel/helper-plugin-utils": "^7.0.0",
|
600
562
|
"lodash": "^4.17.13"
|
601
|
-
},
|
602
|
-
"dependencies": {
|
603
|
-
"lodash": {
|
604
|
-
"version": "4.17.15",
|
605
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
606
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
607
|
-
"dev": true
|
608
|
-
}
|
609
563
|
}
|
610
564
|
},
|
611
565
|
"@babel/plugin-transform-classes": {
|
@@ -1056,12 +1010,6 @@
|
|
1056
1010
|
"ms": "^2.1.1"
|
1057
1011
|
}
|
1058
1012
|
},
|
1059
|
-
"lodash": {
|
1060
|
-
"version": "4.17.15",
|
1061
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
1062
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
1063
|
-
"dev": true
|
1064
|
-
},
|
1065
1013
|
"ms": {
|
1066
1014
|
"version": "2.1.2",
|
1067
1015
|
"resolved": "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz",
|
@@ -1079,14 +1027,6 @@
|
|
1079
1027
|
"esutils": "^2.0.2",
|
1080
1028
|
"lodash": "^4.17.13",
|
1081
1029
|
"to-fast-properties": "^2.0.0"
|
1082
|
-
},
|
1083
|
-
"dependencies": {
|
1084
|
-
"lodash": {
|
1085
|
-
"version": "4.17.15",
|
1086
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
1087
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
1088
|
-
"dev": true
|
1089
|
-
}
|
1090
1030
|
}
|
1091
1031
|
},
|
1092
1032
|
"@sinonjs/commons": {
|
@@ -1117,14 +1057,6 @@
|
|
1117
1057
|
"@sinonjs/commons": "^1.3.0",
|
1118
1058
|
"array-from": "^2.1.1",
|
1119
1059
|
"lodash": "^4.17.15"
|
1120
|
-
},
|
1121
|
-
"dependencies": {
|
1122
|
-
"lodash": {
|
1123
|
-
"version": "4.17.15",
|
1124
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.15.tgz",
|
1125
|
-
"integrity": "sha512-8xOcRHvCjnocdS5cpwXQXVzmmh5e5+saE2QGoeQmbKmRS6J3VQppPOIt0MnmE+4xlZoumy0GPG0D0MVIQbNA1A==",
|
1126
|
-
"dev": true
|
1127
|
-
}
|
1128
1060
|
}
|
1129
1061
|
},
|
1130
1062
|
"@sinonjs/text-encoding": {
|
@@ -4579,9 +4511,9 @@
|
|
4579
4511
|
}
|
4580
4512
|
},
|
4581
4513
|
"lodash": {
|
4582
|
-
"version": "4.17.
|
4583
|
-
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.
|
4584
|
-
"integrity": "sha512-
|
4514
|
+
"version": "4.17.19",
|
4515
|
+
"resolved": "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz",
|
4516
|
+
"integrity": "sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==",
|
4585
4517
|
"dev": true
|
4586
4518
|
},
|
4587
4519
|
"log-symbols": {
|
data/package.json
CHANGED
data/shopify_app.gemspec
CHANGED
@@ -15,7 +15,7 @@ Gem::Specification.new do |s|
|
|
15
15
|
|
16
16
|
s.add_runtime_dependency('browser_sniffer', '~> 1.2.2')
|
17
17
|
s.add_runtime_dependency('rails', '> 5.2.1')
|
18
|
-
s.add_runtime_dependency('shopify_api', '~> 9.1
|
18
|
+
s.add_runtime_dependency('shopify_api', '~> 9.1')
|
19
19
|
s.add_runtime_dependency('omniauth-shopify-oauth2', '~> 2.2.2')
|
20
20
|
s.add_runtime_dependency('jwt', '~> 2.2.1')
|
21
21
|
s.add_runtime_dependency('redirect_safely', '~> 1.0')
|
data/yarn.lock
CHANGED
@@ -3202,9 +3202,9 @@ locate-path@^3.0.0:
|
|
3202
3202
|
path-exists "^3.0.0"
|
3203
3203
|
|
3204
3204
|
lodash@^4.17.11, lodash@^4.17.13, lodash@^4.17.14, lodash@^4.17.15:
|
3205
|
-
version "4.17.
|
3206
|
-
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.
|
3207
|
-
integrity sha512-
|
3205
|
+
version "4.17.19"
|
3206
|
+
resolved "https://registry.yarnpkg.com/lodash/-/lodash-4.17.19.tgz#e48ddedbe30b3321783c5b4301fbd353bc1e4a4b"
|
3207
|
+
integrity sha512-JNvd8XER9GQX0v2qJgsaN/mzFCNA5BRe/j8JN9d+tWyGLSodKQHKFicdwNYzWwI3wjRnaKPsGj1XkBjx/F96DQ==
|
3208
3208
|
|
3209
3209
|
log-symbols@2.2.0:
|
3210
3210
|
version "2.2.0"
|
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: shopify_app
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 13.4.
|
4
|
+
version: 13.4.1
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- Shopify
|
8
8
|
autorequire:
|
9
9
|
bindir: bin
|
10
10
|
cert_chain: []
|
11
|
-
date: 2020-
|
11
|
+
date: 2020-07-16 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: browser_sniffer
|
@@ -44,14 +44,14 @@ dependencies:
|
|
44
44
|
requirements:
|
45
45
|
- - "~>"
|
46
46
|
- !ruby/object:Gem::Version
|
47
|
-
version: 9.1
|
47
|
+
version: '9.1'
|
48
48
|
type: :runtime
|
49
49
|
prerelease: false
|
50
50
|
version_requirements: !ruby/object:Gem::Requirement
|
51
51
|
requirements:
|
52
52
|
- - "~>"
|
53
53
|
- !ruby/object:Gem::Version
|
54
|
-
version: 9.1
|
54
|
+
version: '9.1'
|
55
55
|
- !ruby/object:Gem::Dependency
|
56
56
|
name: omniauth-shopify-oauth2
|
57
57
|
requirement: !ruby/object:Gem::Requirement
|
@@ -243,6 +243,7 @@ files:
|
|
243
243
|
- ".babelrc"
|
244
244
|
- ".github/CODEOWNERS"
|
245
245
|
- ".github/ISSUE_TEMPLATE.md"
|
246
|
+
- ".github/PULL_REQUEST_TEMPLATE.md"
|
246
247
|
- ".github/probots.yml"
|
247
248
|
- ".github/workflows/rubocop.yml"
|
248
249
|
- ".gitignore"
|