whop 1.0.2 → 1.0.4

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b66a5c1ff726bf0d3142a0d2f3263f990c114f1de42c05dfe3d564d63719e702
-  data.tar.gz: c36bc051232dafa141659f0a11df945f5ce06aa8b852ae37504b752d72ed2cfc
+  metadata.gz: 3c6ea2caf5959059d7e27c54eecb479e8007420a1e3989fcc8ab9b3cf3d6be4e
+  data.tar.gz: 9f2d86766b0cd27d265e9fd87c1be3102b9baf0c9d836539d4217427d864e998
 SHA512:
-  metadata.gz: 13b4f042216946a03e922f4c7642c6b8a478b3ea95b9c3e727a39e756f989ad7ae6cf248e7dfa74a3101637ea3eef5c9e89acf80d7cd4a322067c0eb4e529cf2
-  data.tar.gz: 417ab6ac4239fbe3bbbdccb3a7bf41326e847152318658449fc92fd74e28b2999ac556a8a27656322235eaf74e3ecafe384191a074a1030b15a6fa07ebef72b6
+  metadata.gz: 7e08a3e8c6bc48cad71cfc3bd5c7e67feb0718df8077bbdbbbd046d24de8e27e5a29e60b8c37a9c30a82952ba11c15a21708e215f62fff670a1bff4a3881054d
+  data.tar.gz: f9697d3d60918f218c6bc61798733cc83bc7d46b4a6e679042e7434c39c5d84d8ec3d0d16f623603ebe9ae32ddb05993f7a0e52f6210adb5f16259823341ad6e

data/README.md

@@ -116,6 +116,16 @@ curl -i -X POST http://localhost:3000/whop/webhooks \
 ```
 
 ## Using the client
+# Frontend (iframe) helper
+
+Add the SDK tags in your layout head:
+
+```erb
+<%= extend(Whop::IframeHelper) && whop_iframe_sdk_tags %>
+```
+
+Ensure your CSP allows Whop domains; the installer adds `config/initializers/whop_iframe.rb` with sensible defaults (script/connect/frame to unpkg.com, esm.sh, whop.com/*).
+
 
 ```ruby
 # With app/company context from env

data/lib/generators/whop/install/templates/whop_iframe.rb

@@ -4,6 +4,12 @@ Rails.application.config.action_dispatch.default_headers.delete('X-Frame-Options
 
 Rails.application.config.content_security_policy do |policy|
   policy.frame_ancestors :self, "https://whop.com", "https://*.whop.com"
+  # Allow Whop iframe SDK (UMD) and ESM fallback
+  policy.script_src :self, :https, "https://unpkg.com", "https://esm.sh"
+  # Allow network calls to Whop API from the browser as needed
+  policy.connect_src :self, :https, "https://whop.com", "https://*.whop.com"
+  # Allow embedding Whop frames
+  policy.frame_src   :self, "https://whop.com", "https://*.whop.com"
 end
 
 

data/lib/whop/dsl.rb

@@ -24,6 +24,15 @@ module Whop
         @methods[method_name.to_sym] = { type: :graphql, operation: operation, args: Array(args).map(&:to_sym) }
       end
 
+      def graphql_inline(method_name, operation:, query:, args: [])
+        @methods[method_name.to_sym] = {
+          type: :graphql_inline,
+          operation: operation,
+          query: query,
+          args: Array(args).map(&:to_sym)
+        }
+      end
+
       def rest_get(method_name, path:, args: [], params: [])
         @methods[method_name.to_sym] = { type: :rest_get, path: path, args: Array(args).map(&:to_sym), params: Array(params).map(&:to_sym) }
       end
@@ -63,6 +72,9 @@ module Whop
         when :graphql
           variables = build_named_args(spec[:args], args, kwargs)
           @client.graphql(spec[:operation], variables)
+        when :graphql_inline
+          variables = build_named_args(spec[:args], args, kwargs)
+          @client.graphql_query(spec[:operation], spec[:query], variables)
         when :rest_get
           path = interpolate_path(spec[:path], build_named_args(spec[:args], args, kwargs))
           query = kwargs.select { |k, _| spec[:params].include?(k.to_sym) }

data/lib/whop/dsl_prelude.rb

@@ -34,16 +34,100 @@ Whop::DSL.define do
   end
 
   resource :payments do
-    graphql :create_checkout_session, operation: "createCheckoutSession", args: %i[input]
-    graphql :charge_user, operation: "chargeUser", args: %i[input]
-    graphql :pay_user, operation: "payUser", args: %i[input]
-    graphql :list_receipts_for_company, operation: "listReceiptsForCompany", args: %i[companyId first after filter]
+    graphql_inline :create_checkout_session,
+      operation: "createCheckoutSession",
+      args: %i[input],
+      query: <<~GQL
+        mutation createCheckoutSession($input: CreateCheckoutSessionInput!) {
+          createCheckoutSession(input: $input) {
+            id
+            planId
+          }
+        }
+      GQL
+
+    graphql_inline :charge_user,
+      operation: "chargeUser",
+      args: %i[input],
+      query: <<~GQL
+        mutation chargeUser($input: ChargeUserInput!) {
+          chargeUser(input: $input) {
+            status
+            inAppPurchase: checkoutSession {
+              id
+              planId
+            }
+          }
+        }
+      GQL
+
+    graphql_inline :pay_user,
+      operation: "payUser",
+      args: %i[input],
+      query: <<~GQL
+        mutation payUser($input: TransferFundsInput!) {
+          transferFunds(input: $input)
+        }
+      GQL
+
+    graphql_inline :list_receipts_for_company,
+      operation: "listReceiptsForCompany",
+      args: %i[companyId first after filter],
+      query: <<~GQL
+        query listReceiptsForCompany($companyId: ID!, $first: Int, $after: String, $filter: ReceiptV2Filters) {
+          company(id: $companyId) {
+            receipts: receiptsV2(first: $first, after: $after, filter: $filter) {
+              nodes {
+                id
+                createdAt
+                finalAmount
+                currency
+              }
+              pageInfo { hasNextPage endCursor }
+            }
+          }
+        }
+      GQL
   end
 
   resource :invoices do
-    graphql :create_invoice, operation: "createInvoice", args: %i[input]
-    graphql :get_invoice, operation: "getInvoice", args: %i[invoiceId companyId]
-    graphql :list_invoices, operation: "listInvoices", args: %i[companyId after before first last]
+    graphql_inline :create_invoice,
+      operation: "createInvoice",
+      args: %i[input],
+      query: <<~GQL
+        mutation createInvoice($input: CreateInvoiceInput!) {
+          createInvoice(input: $input) {
+            invoice { id number status createdAt }
+            checkoutJobId
+          }
+        }
+      GQL
+
+    graphql_inline :get_invoice,
+      operation: "getInvoice",
+      args: %i[invoiceId companyId],
+      query: <<~GQL
+        query getInvoice($invoiceId: ID!, $companyId: ID!) {
+          company(id: $companyId) {
+            invoice(id: $invoiceId) { id number status createdAt }
+          }
+        }
+      GQL
+
+    graphql_inline :list_invoices,
+      operation: "listInvoices",
+      args: %i[companyId after before first last],
+      query: <<~GQL
+        query listInvoices($companyId: ID!, $after: String, $before: String, $first: Int, $last: Int) {
+          company(id: $companyId) {
+            invoices(after: $after, before: $before, first: $first, last: $last) {
+              totalCount
+              pageInfo { endCursor hasNextPage hasPreviousPage startCursor }
+              nodes { id number status createdAt }
+            }
+          }
+        }
+      GQL
   end
 
   resource :promo_codes do

data/lib/whop/iframe_helper.rb

@@ -0,0 +1,53 @@
+require "erb"
+
+module Whop
+  module IframeHelper
+    # Renders the Whop iframe SDK UMD script and a small inline initializer that creates
+    # a global window.iframeSdk instance. The initializer uses the provided app_id, or
+    # falls back to ENV["WHOP_APP_ID"] / Whop.config.app_id, then finally to
+    # document.body.dataset.whopAppId if present.
+    #
+    # Usage in layout head:
+    #   <%= whop_iframe_sdk_tags %>
+    # Optionally add <body data-whop-app-id="..."> if you prefer not to expose ENV.
+    def whop_iframe_sdk_tags(app_id: nil, nonce: nil)
+      resolved_app_id = app_id || ENV["WHOP_APP_ID"] || (Whop.config.app_id rescue nil) || ""
+      begin
+        # Prefer CSP nonce from Rails if available
+        nonce ||= respond_to?(:content_security_policy_nonce) ? content_security_policy_nonce : nil
+      rescue StandardError
+        # ignore
+      end
+
+      nonce_attr = nonce ? " nonce=\"#{ERB::Util.html_escape(nonce)}\"" : ""
+      init = <<~JS
+        (function () {
+          try {
+            var g = window;
+            var create = (g.WhopIframe && g.WhopIframe.createSdk) ||
+                         (g.WhopIframeSdk && g.WhopIframeSdk.createSdk) ||
+                         g.createWhopIframeSdk ||
+                         g.createSdk;
+            if (create && !g.iframeSdk) {
+              var appId = #{resolved_app_id.to_s.strip.empty? ? '""' : ERB::Util.html_escape(resolved_app_id).inspect};
+              if (!appId) {
+                var body = document.body;
+                appId = (body && body.dataset && body.dataset.whopAppId) || "";
+              }
+              if (appId) {
+                g.iframeSdk = create({ appId: appId });
+              }
+            }
+          } catch (e) {
+            // swallow init errors
+          }
+        })();
+      JS
+
+      html = %Q(<script src="https://unpkg.com/@whop/iframe@latest"#{nonce_attr}></script>\n<script#{nonce_attr}>#{init.strip}</script>)
+      html.respond_to?(:html_safe) ? html.html_safe : html
+    end
+  end
+end
+
+

data/lib/whop/version.rb

@@ -1,5 +1,5 @@
 module Whop
-  VERSION = "1.0.2"
+  VERSION = "1.0.4"
 end
 
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: whop
 version: !ruby/object:Gem::Version
-  version: 1.0.2
+  version: 1.0.4
 platform: ruby
 authors:
 - Nikhil Nelson
@@ -175,6 +175,7 @@ files:
 - lib/whop/dsl.rb
 - lib/whop/dsl_prelude.rb
 - lib/whop/error.rb
+- lib/whop/iframe_helper.rb
 - lib/whop/token.rb
 - lib/whop/version.rb
 - lib/whop/webhooks/engine.rb