@adtrackify/at-service-common 1.0.37 → 1.0.38

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@adtrackify/at-service-common",
-  "version": "1.0.37",
+  "version": "1.0.38",
   "description": "",
   "main": "./dist/index.js",
   "types": "./dist/index.d.ts",

package/src/libs/index.ts

@@ -2,3 +2,6 @@ export * from './crypto';
 export * from './dates';
 export * from './http-error';
 export * from './http-status-codes';
+export * from './shopify';
+export * from './url';
+

package/src/libs/shopify.ts

@@ -0,0 +1,25 @@
+import { createHmac } from 'crypto';
+import { mapObjectToQueryString } from './url';
+
+export interface ShopifyRequestValidationParameters {
+  code: string,
+  hmac?: string,
+  shop: string,
+  state: string,
+  timestamp: string;
+}
+
+export const validateShopifyAppParameters = (validationParams: ShopifyRequestValidationParameters, validationHmac: string, shopifyAppApiSecret: string) => {
+  // remove hmac if it exists
+  // map input to query string
+  // generate hash using api secret key and validate it matches hmac
+  delete validationParams.hmac;
+  const hmacString = mapObjectToQueryString(validationParams);
+
+
+  const generatedHash = createHmac('sha256', shopifyAppApiSecret)
+    .update(hmacString)
+    .digest('hex');
+
+  return generatedHash === validationHmac;
+};

package/src/libs/url.ts

@@ -0,0 +1,10 @@
+// Record<string, string> is any object
+export const mapObjectToQueryString = (inputObj: any): string => {
+  const qsp = Object.entries(inputObj).sort((a, b) => a[ 0 ] < b[ 0 ] ? -1 : 1);
+  const urlParams = new URLSearchParams();
+  qsp.map(p => {
+    urlParams.append(p[ 0 ], p[ 1 ] as string);
+  });
+  const qs = urlParams.toString();
+  return qs;
+};