@agnostack/next-shopify 1.10.0-beta.8 → 1.10.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/CHANGELOG.md +53 -66
- package/dist/lib/handlers/api/billing.d.ts.map +1 -1
- package/dist/lib/handlers/api/billing.js +1 -1
- package/dist/lib/handlers/api/billing.js.map +1 -1
- package/dist/lib/handlers/api/callback.d.ts.map +1 -1
- package/dist/lib/handlers/api/callback.js +11 -3
- package/dist/lib/handlers/api/callback.js.map +1 -1
- package/dist/lib/handlers/api/proxy.d.ts.map +1 -1
- package/dist/lib/handlers/api/proxy.js +58 -54
- package/dist/lib/handlers/api/proxy.js.map +1 -1
- package/dist/lib/handlers/api/token.d.ts.map +1 -1
- package/dist/lib/handlers/api/token.js +34 -36
- package/dist/lib/handlers/api/token.js.map +1 -1
- package/dist/lib/handlers/api/uninstall.d.ts.map +1 -1
- package/dist/lib/handlers/api/uninstall.js +1 -1
- package/dist/lib/handlers/api/uninstall.js.map +1 -1
- package/dist/lib/handlers/api/webhook.d.ts.map +1 -1
- package/dist/lib/handlers/api/webhook.js +2 -10
- package/dist/lib/handlers/api/webhook.js.map +1 -1
- package/dist/lib/index.d.ts +1 -1
- package/dist/lib/index.d.ts.map +1 -1
- package/dist/lib/index.js +1 -3
- package/dist/lib/index.js.map +1 -1
- package/dist/lib/utils/headers.js +1 -1
- package/dist/lib/utils/headers.js.map +1 -1
- package/dist/lib/utils/index.d.ts +1 -0
- package/dist/lib/utils/index.js +1 -0
- package/dist/lib/utils/index.js.map +1 -1
- package/dist/lib/utils/session.d.ts +7 -8
- package/dist/lib/utils/session.d.ts.map +1 -1
- package/dist/lib/utils/session.js +31 -32
- package/dist/lib/utils/session.js.map +1 -1
- package/dist/lib/utils/shopify.d.ts +2 -4
- package/dist/lib/utils/shopify.d.ts.map +1 -1
- package/dist/lib/utils/shopify.js +9 -8
- package/dist/lib/utils/shopify.js.map +1 -1
- package/dist/lib/utils/token.d.ts +17 -0
- package/dist/lib/utils/token.d.ts.map +1 -0
- package/dist/lib/utils/token.js +35 -0
- package/dist/lib/utils/token.js.map +1 -0
- package/dist/lib/withShopify.d.ts.map +1 -1
- package/dist/lib/withShopify.js +9 -3
- package/dist/lib/withShopify.js.map +1 -1
- package/dist/shared/constants.d.ts +1 -0
- package/dist/shared/constants.d.ts.map +1 -1
- package/dist/shared/constants.js +1 -0
- package/dist/shared/constants.js.map +1 -1
- package/dist/shared/errors.d.ts +2 -0
- package/dist/shared/errors.d.ts.map +1 -1
- package/dist/shared/errors.js +9 -1
- package/dist/shared/errors.js.map +1 -1
- package/dist/shared/match.d.ts.map +1 -1
- package/dist/shared/match.js +3 -9
- package/dist/shared/match.js.map +1 -1
- package/dist/shared/shopify.d.ts +4 -0
- package/dist/shared/shopify.d.ts.map +1 -1
- package/dist/shared/shopify.js +6 -3
- package/dist/shared/shopify.js.map +1 -1
- package/package.json +2 -1
package/CHANGELOG.md
CHANGED
|
@@ -1,85 +1,72 @@
|
|
|
1
|
-
# [1.10.0
|
|
1
|
+
# [1.10.0](https://github.com/agnostack/next-shopify/compare/v1.9.5...v1.10.0) (2023-07-10)
|
|
2
2
|
|
|
3
3
|
|
|
4
4
|
### Bug Fixes
|
|
5
5
|
|
|
6
|
+
* added appId prep ([65f4501](https://github.com/agnostack/next-shopify/commit/65f4501cc592a85fac3f231ebb1ced6f2994d343))
|
|
7
|
+
* added appId prep ([944671c](https://github.com/agnostack/next-shopify/commit/944671c1c23286e121fbe9013698dd8843e946e8))
|
|
8
|
+
* added loadAppData and prepareHeaders ([da9209e](https://github.com/agnostack/next-shopify/commit/da9209e25a383e9078b78df3076bf59658e60593))
|
|
9
|
+
* added minimatch, moved template to lib from shared ([fec7b71](https://github.com/agnostack/next-shopify/commit/fec7b7108a362deff21f6311a56d38f39d5f80bb))
|
|
10
|
+
* added normalizeShopifyId ([f2deeac](https://github.com/agnostack/next-shopify/commit/f2deeaca3b22d57a89c7c59fb1ae12031598821e))
|
|
11
|
+
* added ORIGIN_SAFELIST ([4b719e6](https://github.com/agnostack/next-shopify/commit/4b719e6aa4567a6b41a5d742f380100e9a03f893))
|
|
12
|
+
* prepareHeaders ([5d0c486](https://github.com/agnostack/next-shopify/commit/5d0c486227e69a9765131aed5f3e3e2c6b5c5e91))
|
|
13
|
+
* prepareHeaders ([a702a51](https://github.com/agnostack/next-shopify/commit/a702a510dfbec943392a09f4da830fbf98f8c0aa))
|
|
14
|
+
* prepareHeaders ([7586780](https://github.com/agnostack/next-shopify/commit/75867801517af87a5e2d0daea2487f76ca53944e))
|
|
15
|
+
* prepareHeaders ([fa3f8b1](https://github.com/agnostack/next-shopify/commit/fa3f8b10cceedab716abc822e7421f4fe9786061))
|
|
16
|
+
* prepareHeaders ([4416cf6](https://github.com/agnostack/next-shopify/commit/4416cf6c000acd719ba6fecfe03802e17742fa34))
|
|
17
|
+
* prepareHeaders ([4ffc6dd](https://github.com/agnostack/next-shopify/commit/4ffc6dd202a9f5bf39a7dc3a9027395eecbc6883))
|
|
18
|
+
* prepareHeaders ([c0da4a5](https://github.com/agnostack/next-shopify/commit/c0da4a5c04904c6671776e8922391d449cb93ea7))
|
|
19
|
+
* prepareHeaders ([3a35997](https://github.com/agnostack/next-shopify/commit/3a359971e27c3b3f7abedcec168b298a7e67b80c))
|
|
20
|
+
* prepareHeaders ([3a03db2](https://github.com/agnostack/next-shopify/commit/3a03db2363d157eb2557f08d0d47bd958a5e7f87))
|
|
21
|
+
* prepareHeaders ([2fdb0fa](https://github.com/agnostack/next-shopify/commit/2fdb0fa68300c6354400ffecff8a88282e0816f1))
|
|
22
|
+
* prepareHeaders ([cbbeeb6](https://github.com/agnostack/next-shopify/commit/cbbeeb63290ed102d62d472d22fe6b342f77ac46))
|
|
23
|
+
* prepareHeaders ([7b40a39](https://github.com/agnostack/next-shopify/commit/7b40a39ee4aea6547700d6d31a027eb6e7258c22))
|
|
24
|
+
* prepareHeaders ([f74f227](https://github.com/agnostack/next-shopify/commit/f74f227c7b50381746fb833b416951ea205c9503))
|
|
25
|
+
* prepareHeaders ([7eba9ad](https://github.com/agnostack/next-shopify/commit/7eba9ad482a13e865dee520019e41254291346f6))
|
|
26
|
+
* prepareHeaders ([0eacf0a](https://github.com/agnostack/next-shopify/commit/0eacf0a682af1181b8e16b0bd56229fb295997f5))
|
|
27
|
+
* prepareHeaders ([1ad0578](https://github.com/agnostack/next-shopify/commit/1ad05785b292a6fe14d86121e887562496b434d3))
|
|
28
|
+
* prepareHeaders ([0f8979f](https://github.com/agnostack/next-shopify/commit/0f8979fbab2fa08e43b383f649aa33dc833d6a46))
|
|
29
|
+
* prepareHeaders ([b0f8fe3](https://github.com/agnostack/next-shopify/commit/b0f8fe34f76fe5082e7e1b2a874b9b3278698c38))
|
|
30
|
+
* prepareHeaders ([ed1ba82](https://github.com/agnostack/next-shopify/commit/ed1ba82aabf6456a79a46f30027c096663509da0))
|
|
31
|
+
* prepareHeaders ([ca1bb86](https://github.com/agnostack/next-shopify/commit/ca1bb86d37e464755ecf33f62b3040c642b8a62d))
|
|
32
|
+
* prepareHeaders ([0ad8e8a](https://github.com/agnostack/next-shopify/commit/0ad8e8a82cd3e51c875a8c7f2a7cd4d4fd6d5a02))
|
|
33
|
+
* prepareHeaders ([df67c21](https://github.com/agnostack/next-shopify/commit/df67c2120ec44ff0e848433c2f457f95f5dcd28e))
|
|
6
34
|
* prepareHeaders ([5e84131](https://github.com/agnostack/next-shopify/commit/5e8413186dabb5237359e021d32a6540c19e7eb0))
|
|
7
|
-
|
|
8
|
-
|
|
9
|
-
|
|
10
|
-
|
|
11
|
-
|
|
12
|
-
|
|
35
|
+
* removed SETTING_REPLACEMENTS ([5a273b9](https://github.com/agnostack/next-shopify/commit/5a273b9eab8b49517d4576c3159bad507bb6f567))
|
|
36
|
+
* update hostmatching ([5437469](https://github.com/agnostack/next-shopify/commit/5437469a8d22bf98ee3ff85d7732c6608eb47846))
|
|
37
|
+
* updates ([017df3b](https://github.com/agnostack/next-shopify/commit/017df3b52905fd03d663ec515f808ad7e30c6f22))
|
|
38
|
+
* updates ([5229ca1](https://github.com/agnostack/next-shopify/commit/5229ca1604f0ce62e13404bab8cebacffa32aa44))
|
|
39
|
+
* updates ([c7c8a5d](https://github.com/agnostack/next-shopify/commit/c7c8a5d748fff047b7183c0f7418f61724216130))
|
|
40
|
+
* updates ([8e50c62](https://github.com/agnostack/next-shopify/commit/8e50c621401cdf3e0eb237327512d493f0f1d582))
|
|
41
|
+
* updates ([5aa5b2e](https://github.com/agnostack/next-shopify/commit/5aa5b2e6ed42770631349266bc7801e8ee6528f7))
|
|
42
|
+
* updates ([7b005a1](https://github.com/agnostack/next-shopify/commit/7b005a1a02ff22e813b93d25eb5b80b3440ddf95))
|
|
43
|
+
* updates ([b99b2ef](https://github.com/agnostack/next-shopify/commit/b99b2ef3e51f04532b7a1425b24e64ab46681141))
|
|
44
|
+
* updates ([fe800fc](https://github.com/agnostack/next-shopify/commit/fe800fcbd2806f16ec8c9c422e1388d818de5aa3))
|
|
45
|
+
* updates ([861a6ba](https://github.com/agnostack/next-shopify/commit/861a6ba97d13a3dff38078508eac83d555d911f8))
|
|
46
|
+
* updates ([4749076](https://github.com/agnostack/next-shopify/commit/4749076c7203faf55d9af0cc7c761498c9179f7c))
|
|
47
|
+
* updates ([e76fd0c](https://github.com/agnostack/next-shopify/commit/e76fd0cc4b06f90bf88ca4aec1fef6e00dd72a19))
|
|
48
|
+
* updates ([dd42b54](https://github.com/agnostack/next-shopify/commit/dd42b54684b6effb4b67fd7298e9c0fb1ea90fc5))
|
|
49
|
+
* webhooks ([180c742](https://github.com/agnostack/next-shopify/commit/180c742b537732f3c64f62ea15ea2300fe95b9f1))
|
|
50
|
+
* webhooks ([293570d](https://github.com/agnostack/next-shopify/commit/293570df908497e6829011ba9ca9a041b715d77b))
|
|
51
|
+
* webhooks ([8c96881](https://github.com/agnostack/next-shopify/commit/8c96881cd7ef4794fe3c2b736368fde449a4785d))
|
|
52
|
+
* webhooks ([4c5965f](https://github.com/agnostack/next-shopify/commit/4c5965f2978f68e3da23d8937ecf6d5ff9aef2d4))
|
|
53
|
+
* webhooks ([4957b8d](https://github.com/agnostack/next-shopify/commit/4957b8d1565d3fe133fbf9a64b2dabf3780dc225))
|
|
54
|
+
* webhooks ([8879fe7](https://github.com/agnostack/next-shopify/commit/8879fe7fc21fe9a09361fd4832f7b3d949d5410c))
|
|
55
|
+
* webhooks ([64bcc89](https://github.com/agnostack/next-shopify/commit/64bcc8996b8dc1dd9ef3373e548f0c2cac22efd2))
|
|
56
|
+
* webhooks ([2689359](https://github.com/agnostack/next-shopify/commit/2689359c8f2a653e50e34039209dfbf14d590382))
|
|
13
57
|
* webhooks ([14bb9f1](https://github.com/agnostack/next-shopify/commit/14bb9f1a700230fa33952b3d4acff9d8fc7f6874))
|
|
14
|
-
|
|
15
|
-
# [1.10.0-beta.6](https://github.com/agnostack/next-shopify/compare/v1.10.0-beta.5...v1.10.0-beta.6) (2023-07-08)
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
### Bug Fixes
|
|
19
|
-
|
|
20
58
|
* webhooks ([5cb3187](https://github.com/agnostack/next-shopify/commit/5cb3187257aa71490b609284f00ee209396e6ee2))
|
|
21
|
-
|
|
22
|
-
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
### Bug Fixes
|
|
26
|
-
|
|
27
|
-
* update hostmatching ([5437469](https://github.com/agnostack/next-shopify/commit/5437469a8d22bf98ee3ff85d7732c6608eb47846))
|
|
28
|
-
|
|
29
|
-
# [1.10.0-beta.4](https://github.com/agnostack/next-shopify/compare/v1.10.0-beta.3...v1.10.0-beta.4) (2023-07-08)
|
|
30
|
-
|
|
31
|
-
|
|
32
|
-
### Bug Fixes
|
|
33
|
-
|
|
59
|
+
* webtoken ([8ddb19d](https://github.com/agnostack/next-shopify/commit/8ddb19d7ad14031583c56ee03197c23e658a594e))
|
|
60
|
+
* webtoken ([2788d5e](https://github.com/agnostack/next-shopify/commit/2788d5ee804d4aae8abfab63a8c39fea0aa4a455))
|
|
34
61
|
* work in progress ([86f0256](https://github.com/agnostack/next-shopify/commit/86f0256fa2dd2110c974a912cd456fc6246ba878))
|
|
35
|
-
|
|
36
|
-
# [1.10.0-beta.3](https://github.com/agnostack/next-shopify/compare/v1.10.0-beta.2...v1.10.0-beta.3) (2023-07-08)
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
### Bug Fixes
|
|
40
|
-
|
|
41
62
|
* work in progress ([e4740ac](https://github.com/agnostack/next-shopify/commit/e4740ac5101db1e6a0794dc447173454cdb4aa2b))
|
|
42
|
-
|
|
43
|
-
# [1.10.0-beta.2](https://github.com/agnostack/next-shopify/compare/v1.10.0-beta.1...v1.10.0-beta.2) (2023-07-08)
|
|
44
|
-
|
|
45
|
-
|
|
46
|
-
### Bug Fixes
|
|
47
|
-
|
|
48
63
|
* work in progress ([bf7bf6d](https://github.com/agnostack/next-shopify/commit/bf7bf6d3de707c9ac49036374dfc63a519a5789f))
|
|
49
64
|
|
|
50
|
-
# [1.10.0-beta.1](https://github.com/agnostack/next-shopify/compare/v1.9.6-beta.2...v1.10.0-beta.1) (2023-07-08)
|
|
51
|
-
|
|
52
|
-
|
|
53
|
-
### Bug Fixes
|
|
54
|
-
|
|
55
|
-
* added loadAppData and prepareHeaders ([da9209e](https://github.com/agnostack/next-shopify/commit/da9209e25a383e9078b78df3076bf59658e60593))
|
|
56
|
-
* added minimatch, moved template to lib from shared ([fec7b71](https://github.com/agnostack/next-shopify/commit/fec7b7108a362deff21f6311a56d38f39d5f80bb))
|
|
57
|
-
* added normalizeShopifyId ([f2deeac](https://github.com/agnostack/next-shopify/commit/f2deeaca3b22d57a89c7c59fb1ae12031598821e))
|
|
58
|
-
* added ORIGIN_SAFELIST ([4b719e6](https://github.com/agnostack/next-shopify/commit/4b719e6aa4567a6b41a5d742f380100e9a03f893))
|
|
59
|
-
* removed SETTING_REPLACEMENTS ([5a273b9](https://github.com/agnostack/next-shopify/commit/5a273b9eab8b49517d4576c3159bad507bb6f567))
|
|
60
|
-
|
|
61
65
|
|
|
62
66
|
### Features
|
|
63
67
|
|
|
64
68
|
* major revamp of proxy ([8686102](https://github.com/agnostack/next-shopify/commit/8686102a9545710b0ae4f0c39afa522893f81a7f))
|
|
65
69
|
|
|
66
|
-
## [1.9.6-beta.2](https://github.com/agnostack/next-shopify/compare/v1.9.6-beta.1...v1.9.6-beta.2) (2023-07-08)
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
### Bug Fixes
|
|
70
|
-
|
|
71
|
-
* added appId prep ([65f4501](https://github.com/agnostack/next-shopify/commit/65f4501cc592a85fac3f231ebb1ced6f2994d343))
|
|
72
|
-
* added appId prep ([944671c](https://github.com/agnostack/next-shopify/commit/944671c1c23286e121fbe9013698dd8843e946e8))
|
|
73
|
-
|
|
74
|
-
## [1.9.6-beta.1](https://github.com/agnostack/next-shopify/compare/v1.9.5...v1.9.6-beta.1) (2023-07-07)
|
|
75
|
-
|
|
76
|
-
|
|
77
|
-
### Bug Fixes
|
|
78
|
-
|
|
79
|
-
* updates ([dd42b54](https://github.com/agnostack/next-shopify/commit/dd42b54684b6effb4b67fd7298e9c0fb1ea90fc5))
|
|
80
|
-
* webtoken ([8ddb19d](https://github.com/agnostack/next-shopify/commit/8ddb19d7ad14031583c56ee03197c23e658a594e))
|
|
81
|
-
* webtoken ([2788d5e](https://github.com/agnostack/next-shopify/commit/2788d5ee804d4aae8abfab63a8c39fea0aa4a455))
|
|
82
|
-
|
|
83
70
|
## [1.9.5](https://github.com/agnostack/next-shopify/compare/v1.9.4...v1.9.5) (2023-07-06)
|
|
84
71
|
|
|
85
72
|
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/billing.js"],"names":[],"mappings":"AAeO,
|
|
1
|
+
{"version":3,"file":"billing.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/billing.js"],"names":[],"mappings":"AAeO,iGA2DN"}
|
|
@@ -14,7 +14,7 @@ const TERMINAL_STATUSES = [
|
|
|
14
14
|
const handleAppBilling = (serverRuntimeConfig) => (req, res) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
|
|
15
15
|
var _a;
|
|
16
16
|
try {
|
|
17
|
-
const { 'x-shopify-shop-domain': shop } = (_a = req.headers) !== null && _a !== void 0 ? _a : {};
|
|
17
|
+
const { 'x-shop-domain': shopDomain, 'x-shopify-shop-domain': shopifyShopDomain, 'x-shopify-shop': shop = shopifyShopDomain !== null && shopifyShopDomain !== void 0 ? shopifyShopDomain : shopDomain, } = (_a = req.headers) !== null && _a !== void 0 ? _a : {};
|
|
18
18
|
if ((0, shared_1.stringEmpty)(shop)) {
|
|
19
19
|
return res.status(200).json({ handler: 'billing', error: 'Missing shop' });
|
|
20
20
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/billing.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AAEjC,uCAA+C;AAC/C,4CAGwB;AAExB,MAAM,iBAAiB,GAAG;IACxB,SAAS;IACT,UAAU;IACV,WAAW;CACZ,CAAA;AAED,wDAAwD;AACjD,MAAM,gBAAgB,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC1E,IAAI;QACF,MAAM,EAAE,uBAAuB,EAAE,
|
|
1
|
+
{"version":3,"file":"billing.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/billing.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AAEjC,uCAA+C;AAC/C,4CAGwB;AAExB,MAAM,iBAAiB,GAAG;IACxB,SAAS;IACT,UAAU;IACV,WAAW;CACZ,CAAA;AAED,wDAAwD;AACjD,MAAM,gBAAgB,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC1E,IAAI;QACF,MAAM,EACJ,eAAe,EAAE,UAAU,EAC3B,uBAAuB,EAAE,iBAAiB,EAC1C,gBAAgB,EAAE,IAAI,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,UAAU,GACzD,GAAG,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,CAAA;QAErB,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;YACrB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;SAC3E;QAED,MAAM,EAAE,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,kBAAkB,EAAE,GAAG,MAAM,IAAA,yBAAiB,EAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1H,mEAAmE;QACnE,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;QAEnC,MAAM,KAA6B,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACjE,OAAO;YACP,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,GAAG;SACjB,CAAC,EAJI,EAAE,KAAK,OAIX,EAJgB,YAAY,sBAAxB,SAA0B,CAI9B,CAAA;QAEF,IAAI,KAAK,EAAE;YACT,IAAI;gBACF,IAAI,OAAO,GAAG,SAAS,CAAA;gBAEvB,MAAM,CAAC,SAAS,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,GAAI,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;gBAC5E,IAAI,CAAC,SAAS,KAAK,4BAAmB,CAAC,YAAY,CAAC,IAAI,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;oBAC1F,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,kBAAkB,EAAE,CAAA;oBAE3C,sIAAsI;oBACtI,sPAAsP;oBACtP,MAAM,IAAI,CAAC,MAAM,CAAC;wBAChB,IAAI,EAAE,qCAAqC;qBAC5C,CAAC,CAAA;oBAEF,OAAO,GAAG,SAAS,CAAA;iBACpB;gBAED,IAAI,CAAC,mBAAmB,CAAC,gBAAgB,KAAK,QAAQ,CAAC,IAAI,CAAC,iBAAiB,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE;oBAC9F,MAAM,EAAE,EAAE,EAAE,SAAS,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;oBAC7C,4GAA4G;oBAC5G,MAAM,aAAa,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAA;iBAC1D;gBAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,OAAO,EAAE,CAAC,CAAA;aAC7D;YAAC,OAAO,KAAK,EAAE;gBACd,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,EAAE,CAAC,CAAA;aAC3E;SACF;QAED,OAAO,CAAC,IAAI,CAAC,oCAAoC,EAAE,YAAY,CAAC,CAAA;QAChE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,oCAAoC,EAAE,CAAC,CAAA;KACjG;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAA;QAC9C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,SAAS,EAAE,KAAK,EAAE,wBAAwB,EAAE,CAAC,CAAA;KACrF;AACH,CAAC,CAAA,CAAA;AA3DY,QAAA,gBAAgB,oBA2D5B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"callback.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/callback.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"callback.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/callback.js"],"names":[],"mappings":"AAmCO,4GA4KN"}
|
|
@@ -29,7 +29,7 @@ const handleCallback = (serverRuntimeConfig) => (req, res, params) => tslib_1.__
|
|
|
29
29
|
let redirectUrl = `${errorPath}?code=invalid_callback_response`;
|
|
30
30
|
let shopify;
|
|
31
31
|
try {
|
|
32
|
-
const { shopify: _shopify, storeSession, loadSession, ensureBilling } = yield (0, utils_1.getShopifyHelpers)(serverRuntimeConfig, { shop });
|
|
32
|
+
const { shopify: _shopify, storeSession, loadSession, loadAppData, ensureBilling } = yield (0, utils_1.getShopifyHelpers)(serverRuntimeConfig, { shop });
|
|
33
33
|
shopify = _shopify;
|
|
34
34
|
const { session: _session } = yield shopify.auth.callback(authPayload);
|
|
35
35
|
const session = _session.toObject();
|
|
@@ -63,8 +63,16 @@ const handleCallback = (serverRuntimeConfig) => (req, res, params) => tslib_1.__
|
|
|
63
63
|
return res.redirect(302, `${API_PATHS[shared_1.API_ROUTE_NAMES.AUTH_OFFLINE]}?${queryParams}`);
|
|
64
64
|
}
|
|
65
65
|
if (shouldRegisterWebhooks) {
|
|
66
|
-
|
|
67
|
-
|
|
66
|
+
let appId;
|
|
67
|
+
try {
|
|
68
|
+
const { appInfo } = yield loadAppData();
|
|
69
|
+
appId = (0, shared_1.normalizeShopifyId)(appInfo === null || appInfo === void 0 ? void 0 : appInfo.id).id;
|
|
70
|
+
// eslint-disable-next-line no-empty
|
|
71
|
+
}
|
|
72
|
+
catch (_ignore) {
|
|
73
|
+
console.info('Ignoring error loading appData', _ignore);
|
|
74
|
+
}
|
|
75
|
+
const webhookHandlers = (0, utils_1.prepareWebhookHandlers)(serverRuntimeConfig, { appId });
|
|
68
76
|
shopify.webhooks.addHandlers(webhookHandlers);
|
|
69
77
|
// NOTE: webhooks cannot use an online session to make API calls to Shopify (but not all webooks may be doing that for all apps)
|
|
70
78
|
yield shopify.webhooks.register({ session });
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"callback.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/callback.js"],"names":[],"mappings":";;;;AAAA,sDAM6B;AAE7B,uCAGoB;AACpB,
|
|
1
|
+
{"version":3,"file":"callback.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/callback.js"],"names":[],"mappings":";;;;AAAA,sDAM6B;AAE7B,uCAGoB;AACpB,4CAewB;AAExB;;;;;EAKE;AACK,MAAM,cAAc,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;;IAChF,MAUI,KAAA,mBAAmB,EAVjB,EACJ,SAAS,EACT,UAAU,EACV,cAAc,EACd,gBAAgB,OAMK,EALrB,oBAIM,EAJN,qBAII,EAAE,KAAA;IAHJ,6DAA6D;IAC7D,KAAC,2BAAkB,CAAC,eAAgB;IADpC,6DAA6D;IACvB,mBAAmB,SAAA,EACtD,QAAQ,sBAHC,uCAIb,CACoB,CAAA;IACvB,MAAM,SAAS,GAAG,UAAU,CAAC,yBAAgB,CAAC,KAAK,CAAC,CAAA;IACpD,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;IACzC,MAAM,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,GAAG,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,CAAA;IAC7C,MAAM,WAAW,GAAG,EAAE,UAAU,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,EAAE,CAAA;IAEzD,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;QAC1C,+DAA+D;QAC/D,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,SAAS,SAAS,oBAAW,CAAC,gBAAgB,EAAE,CAAC,CAAA;KAC9E;IAED,IAAI,WAAW,GAAG,GAAG,SAAS,iCAAiC,CAAA;IAC/D,IAAI,OAAO,CAAA;IAEX,IAAI;QACF,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,WAAW,EAAE,WAAW,EAAE,aAAa,EAAE,GAAG,MAAM,IAAA,yBAAiB,EAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAC3I,OAAO,GAAG,QAAQ,CAAA;QAElB,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAA;QACtE,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;QAEnC,MAAM,YAAY,GAAG,CACnB,CAAC,gBAAgB,KAAK,QAAQ,CAAC;YAC/B,CAAC,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,QAAQ,CAAC;YAC1B,SAAS,CAAC,wBAAe,CAAC,YAAY,CAAC,CACxC,CAAA;QACD,MAAM,kBAAkB,GAAG,QAAQ,IAAI,CAAC,YAAY,CAAA;QACpD,MAAM,wBAAwB,GAAG,QAAQ,IAAI,IAAA,uBAAc,EAAC,QAAQ,CAAC,IAAI,SAAS,CAAC,wBAAe,CAAC,YAAY,CAAC,CAAA;QAChH,MAAM,sBAAsB,GAAG,CAAC,IAAA,eAAM,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,wBAAe,CAAC,YAAY,CAAC,CAAA;QACrG,MAAM,kBAAkB,GAAG,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,QAAQ,CAAA;QAEnD,4GAA4G;QAC5G,IAAI,aAAa,GAAG,SAAS,CAAA;QAC7B,IAAI,kBAAkB,EAAE;YACtB,MAAM,YAAY,CAAC,OAAO,CAAC,CAAA;SAC5B;aAAM;YACL,mFAAmF;YACnF,MAAM,cAAc,GAAG,MAAM,WAAW,EAAE,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC1D,6CAA6C;gBAC7C,IAAI,CAAC,CAAC,MAAM,YAAY,mCAA0B,CAAC,EAAE;oBACnD,MAAM,MAAM,CAAA;iBACb;YACH,CAAC,CAAC,CAAA;YACF,aAAa,GAAG,CAAA,cAAc,aAAd,cAAc,uBAAd,cAAc,CAAE,aAAa,KAAI,aAAa,CAAA;YAC9D,MAAM,YAAY,iCAAM,OAAO,KAAE,aAAa,IAAG,CAAA;SAClD;QAED,wGAAwG;QACxG,IAAI,wBAAwB,EAAE;YAC5B,oCAAoC;YACpC,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;YAClG,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC,wBAAe,CAAC,YAAY,CAAC,IAAI,WAAW,EAAE,CAAC,CAAA;SACtF;QAED,IAAI,sBAAsB,EAAE;YAC1B,IAAI,KAAK,CAAA;YACT,IAAI;gBACF,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,EAAE,CAAA;gBACvC,KAAK,GAAG,IAAA,2BAAkB,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,EAAE,CAAC,CAAC,EAAE,CAAA;gBAC5C,oCAAoC;aACnC;YAAC,OAAO,OAAO,EAAE;gBAChB,OAAO,CAAC,IAAI,CAAC,gCAAgC,EAAE,OAAO,CAAC,CAAA;aACxD;YAED,MAAM,eAAe,GAAG,IAAA,8BAAsB,EAAC,mBAAmB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAA;YAC9E,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC,eAAe,CAAC,CAAA;YAC7C,gIAAgI;YAChI,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,EAAE,CAAC,CAAA;SAC7C;QAED,+CAA+C;QAC/C,WAAW,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;QAE/D,IAAI,kBAAkB,EAAE;YACtB,oEAAoE;YACpE,MAAM,gBAAgB,GAAG,YAAY,IAAI,CAAC,CAAC,IAAA,eAAM,EAAC,MAAM,CAAC,IAAI,CAAC,aAAa,IAAI,QAAQ,CAAC,CAAC,CAAA;YAEzF,MAAM,eAAe,GAAG,MAAM,aAAa,CAAC,OAAO,EAAE,gBAAgB,CAAC,CAAA;YAEtE,IAAI,IAAA,uBAAc,EAAC,eAAe,CAAC,EAAE;gBACnC,WAAW,GAAG,eAAe,CAAA;aAC9B;SACF;QAED,kEAAkE;QAClE,qEAAqE;QACrE,WAAW,GAAG,IAAA,oBAAW,EAAC,WAAW,EAAE,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;KAClF;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,+BAA+B,EAAE,KAAK,CAAC,CAAA;QACrD,MAAM,YAAY,GAAG,+BAA+B,CAAA;QAEpD,IAAI,YAAY,GAAG,SAAS,CAAA;QAC5B,IAAI,OAAO,EAAE;YACX,IAAI;gBACF,MAAM,cAAc,GAAG,MAAM,OAAO,CAAC,IAAI,CAAC,iBAAiB,CAAC,WAAW,CAAC,CAAA;gBACxE,IAAI,IAAA,uBAAc,EAAC,cAAc,CAAC,EAAE;oBAClC,YAAY,GAAG,GAAG,cAAc,GAAG,IAAA,2BAAkB,EAAC,SAAS,CAAC,EAAE,CAAA;iBACnE;gBACH,oCAAoC;aACnC;YAAC,OAAO,OAAO,EAAE,GAAE;SACrB;QAED,QAAQ,IAAI,EAAE;YACZ,gDAAgD;YAChD,KAAK,KAAK,YAAY,8BAAgB,CAAC,CAAC;gBACtC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,uBAAuB,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAEnE,kBAAkB;gBAClB,MAAM,cAAc,GAAG,SAAS,CAAC,wBAAe,CAAC,WAAW,CAAC,CAAA;gBAC7D,MAAM,QAAQ,GAAG,QAAQ;oBACvB,CAAC,CAAC,cAAc;oBAChB,CAAC,CAAC,SAAS,CAAC,wBAAe,CAAC,YAAY,CAAC,IAAI,cAAc,CAAA;gBAE7D,oCAAoC;gBACpC,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;gBACzE,WAAW,GAAG,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAA;gBAC1C,MAAK;aACN;YAED,KAAK,KAAK,YAAY,4BAAc,CAAC,CAAC;gBACpC,OAAO,CAAC,IAAI,CAAC,GAAG,YAAY,uEAAuE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAA;gBAEnH,kBAAkB;gBAClB,MAAM,cAAc,GAAG,SAAS,CAAC,wBAAe,CAAC,WAAW,CAAC,CAAA;gBAC7D,MAAM,QAAQ,GAAG,QAAQ;oBACvB,CAAC,CAAC,cAAc;oBAChB,CAAC,CAAC,SAAS,CAAC,wBAAe,CAAC,YAAY,CAAC,IAAI,cAAc,CAAA;gBAE7D,oCAAoC;gBACpC,MAAM,WAAW,GAAG,IAAI,eAAe,CAAC,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAA;gBACzE,WAAW,GAAG,GAAG,QAAQ,IAAI,WAAW,EAAE,CAAA;gBAC1C,MAAK;aACN;YAED,KAAK,KAAK,YAAY,0BAAY,CAAC,CAAC;gBAClC,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,mBAAmB,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,CAAC,SAAS,CAAC,CAAA;gBACjF,WAAW,GAAG,GAAG,YAAY,SAAS,oBAAW,CAAC,OAAO,EAAE,CAAA;gBAC3D,MAAK;aACN;YAED,KAAK,KAAK,YAAY,+BAAiB,CAAC,CAAC;gBACvC,MAAM,aAAa,GAAG,IAAA,oBAAW,EAAC,MAAA,KAAK,CAAC,QAAQ,0CAAE,MAAM,CAAC,CAAC,GAAG,CAAC,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC,IAAA,qBAAY,EAAC,OAAO,CAAC,CAAC,CAAA;gBACrG,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,wBAAwB,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;gBAChF,WAAW,GAAG,GAAG,YAAY,SAAS,oBAAW,CAAC,KAAK,EAAE,CAAA;gBACzD,MAAK;aACN;YAED,KAAK,KAAK,YAAY,+BAAiB,CAAC,CAAC;gBACvC,OAAO,CAAC,KAAK,CAAC,GAAG,YAAY,sBAAsB,EAAE,KAAK,CAAC,CAAA;gBAC3D,WAAW,GAAG,GAAG,YAAY,SAAS,oBAAW,CAAC,KAAK,EAAE,CAAA;gBACzD,MAAK;aACN;YAED,OAAO,CAAC,CAAC;gBACP,OAAO,CAAC,KAAK,CAAC,YAAY,EAAE,KAAK,CAAC,CAAA;gBAClC,WAAW,GAAG,GAAG,YAAY,SAAS,oBAAW,CAAC,QAAQ,EAAE,CAAA;aAC7D;SACF;KACF;IAED,OAAO,GAAG,CAAC,QAAQ,CAAC,GAAG,EAAE,WAAW,CAAC,CAAA;AACvC,CAAC,CAAA,CAAA;AA5KY,QAAA,cAAc,kBA4K1B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":"AAiCO,sHAuJN"}
|
|
@@ -15,17 +15,14 @@ const verifyAppProxySignature = (signature, verifiable, hmacSecret) => {
|
|
|
15
15
|
const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
|
|
16
16
|
var _a, _b;
|
|
17
17
|
const { generateReplacements } = config !== null && config !== void 0 ? config : {};
|
|
18
|
-
const { APP_CONFIG, APP_BASE_URL, TARGET_SAFELIST, ORIGIN_SAFELIST } = serverRuntimeConfig;
|
|
19
|
-
const _c = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { origin, 'x-
|
|
20
|
-
'x-shopify-shop': shopHeader =
|
|
21
|
-
'x-shopify-app-id': appId } = _c,
|
|
18
|
+
const { API_PATHS, APP_CONFIG, APP_BASE_URL, TARGET_SAFELIST, ORIGIN_SAFELIST, } = serverRuntimeConfig;
|
|
19
|
+
const _c = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { origin, 'x-forwarded-for': _forwardFor, 'x-forwarded-proto': _forwardProto, 'x-forwarded-host': forwardHost, 'x-proxy-origin': proxyOrigin } = _c, _headers = tslib_1.__rest(_c, ["origin", 'x-forwarded-for', 'x-forwarded-proto', 'x-forwarded-host', 'x-proxy-origin']);
|
|
20
|
+
const { 'x-extension-session': sessionToken, 'x-extension-point': extensionPoint, 'x-shop-domain': shopDomainHeader, 'x-shopify-shop-domain': shopifyShopDomainHeader, 'x-shopify-shop': shopHeader = shopifyShopDomainHeader !== null && shopifyShopDomainHeader !== void 0 ? shopifyShopDomainHeader : shopDomainHeader, 'x-shopify-app-id': appId,
|
|
22
21
|
// 'x-shopify-app-installation-id': appInstallationId,
|
|
23
|
-
|
|
24
|
-
console.log(`>>> > handleProxy > origin1:`, origin);
|
|
25
|
-
console.log(`>>> > handleProxy > proxyOrigin1:`, proxyOrigin);
|
|
22
|
+
} = _headers;
|
|
26
23
|
// NOTE: GET requests are not always sending along origin
|
|
27
|
-
if ((0, shared_1.stringEmpty)(origin)
|
|
28
|
-
req.headers = Object.assign(Object.assign({}, req.headers), { origin: proxyOrigin });
|
|
24
|
+
if ((0, shared_1.stringEmpty)(origin)) {
|
|
25
|
+
req.headers = Object.assign(Object.assign({}, req.headers), { origin: proxyOrigin || forwardHost });
|
|
29
26
|
}
|
|
30
27
|
const _d = (_b = req.query) !== null && _b !== void 0 ? _b : {}, { signature, proxyEncoded } = _d, verifiable = tslib_1.__rest(_d, ["signature", "proxyEncoded"]);
|
|
31
28
|
const { shop: _shop, host, timestamp, path_prefix } = verifiable;
|
|
@@ -33,14 +30,10 @@ const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib
|
|
|
33
30
|
yield (0, nextjs_cors_1.default)(req, res, {
|
|
34
31
|
methods: ['PUT', 'PATCH', 'POST', 'DELETE'],
|
|
35
32
|
origin: (origin, callback) => {
|
|
36
|
-
console.log(`>>> > handleProxy > origin2:`, origin);
|
|
37
|
-
console.log(`>>> > handleProxy > proxyOrigin2:`, proxyOrigin);
|
|
38
|
-
console.log(`>>> > handleProxy > ORIGIN_SAFELIST:`, ORIGIN_SAFELIST);
|
|
39
33
|
const isSafelisted = (0, shared_1.matchHostname)(origin, [
|
|
40
34
|
...ORIGIN_SAFELIST,
|
|
41
35
|
'cdn.shopify.com' // NOTE: this is the domain for checkout UI extensions
|
|
42
36
|
]);
|
|
43
|
-
console.log(`>>> > handleProxy > isSafelisted:`, isSafelisted);
|
|
44
37
|
if (isSafelisted) {
|
|
45
38
|
return callback(null, true);
|
|
46
39
|
}
|
|
@@ -52,53 +45,64 @@ const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib
|
|
|
52
45
|
const _targetUrl = ((0, shared_1.stringEmpty)(targetParam) || targetParam.startsWith('http')) ? targetParam : `${APP_BASE_URL}/${(0, shared_1.removeLeadingSlash)(targetParam)}`;
|
|
53
46
|
const { origin: target, hostname, pathname, search } = (0, shared_1.stringNotEmpty)(_targetUrl) ? new URL(_targetUrl) : {};
|
|
54
47
|
let targetPath = [pathname, search].filter(shared_1.stringNotEmpty).join('');
|
|
55
|
-
|
|
56
|
-
|
|
57
|
-
|
|
58
|
-
|
|
59
|
-
|
|
60
|
-
|
|
61
|
-
|
|
62
|
-
|
|
63
|
-
|
|
64
|
-
|
|
65
|
-
|
|
66
|
-
|
|
67
|
-
|
|
68
|
-
|
|
69
|
-
return res.status(400).json({ message: 'Invalid or missing headers.', extensionPoint });
|
|
70
|
-
}
|
|
71
|
-
const isShopifyOriginOrRelative = (0, shared_1.stringNotEmpty)((0, shared_1.ensureString)(path_prefix).startsWith('http')
|
|
72
|
-
? (0, shared_1.sanitizeShop)(new URL(path_prefix).hostname)
|
|
73
|
-
: path_prefix);
|
|
74
|
-
// TODO: verify
|
|
75
|
-
if (!verifyAppProxySignature(signature, verifiable, isShopifyOriginOrRelative ? APP_CONFIG.apiSecretKey : timestamp)) {
|
|
76
|
-
return res.status(403).json({ message: 'Invalid signature.' });
|
|
77
|
-
}
|
|
78
|
-
// TODO: explore moving this to sessionToken middleware??
|
|
79
|
-
// TODO: verify signature!!!
|
|
80
|
-
if (sessionToken) {
|
|
81
|
-
// NOTE: this does not always contain sid (depending on if calling from appbridge)
|
|
82
|
-
const { shop: sessionShop, host: sessionHost } = (0, shared_1.decodeShopData)(sessionToken);
|
|
83
|
-
if ((sessionShop !== shop) || (sessionHost !== host)) {
|
|
84
|
-
return res.status(403).json({ message: 'Unauthorized shop or host.' });
|
|
48
|
+
let headers;
|
|
49
|
+
try {
|
|
50
|
+
const safelistedTarget = (0, shared_1.matchHostname)(hostname, Object.assign({ [new URL(APP_BASE_URL).hostname]: {
|
|
51
|
+
// HMMM: can we generate our own session token so we can not have to tell handleGraph/Rest to behave as offline?
|
|
52
|
+
// headers: {
|
|
53
|
+
// Authorization: 'Bearer {{setting.zendesk.token}}',
|
|
54
|
+
// },
|
|
55
|
+
params: {
|
|
56
|
+
shop,
|
|
57
|
+
host,
|
|
58
|
+
},
|
|
59
|
+
} }, TARGET_SAFELIST));
|
|
60
|
+
if ((0, shared_1.stringEmpty)(targetPath) || (safelistedTarget == undefined)) {
|
|
61
|
+
return res.status(407).json({ message: 'Unproxyable target' });
|
|
85
62
|
}
|
|
63
|
+
if (!shop || !host || !extensionPoint || !signature || !proxyEncoded) {
|
|
64
|
+
return res.status(400).json({ message: 'Invalid or missing headers', extensionPoint });
|
|
65
|
+
}
|
|
66
|
+
const isShopifyOriginOrRelative = (0, shared_1.stringNotEmpty)((0, shared_1.ensureString)(path_prefix).startsWith('http')
|
|
67
|
+
? (0, shared_1.sanitizeShop)(new URL(path_prefix).hostname)
|
|
68
|
+
: path_prefix);
|
|
69
|
+
// TODO: once Shopify fixes CORS issue when origin is cdn.shopify.com, update this!
|
|
70
|
+
if (!verifyAppProxySignature(signature, verifiable, isShopifyOriginOrRelative ? APP_CONFIG.apiSecretKey : timestamp)) {
|
|
71
|
+
return res.status(403).json({ message: 'Invalid signature' });
|
|
72
|
+
}
|
|
73
|
+
if (targetParam !== API_PATHS[shared_1.API_ROUTE_NAMES.SESSION_TOKEN]) {
|
|
74
|
+
const _getVerifiedSessionData = (0, utils_1.getVerifiedSessionData)(serverRuntimeConfig);
|
|
75
|
+
if (!_getVerifiedSessionData(sessionToken, { shop, host }).catch((_error) => {
|
|
76
|
+
if (_error instanceof shared_1.ShopifySessionInvalidError) {
|
|
77
|
+
return res.status(403).json({ message: _error.message });
|
|
78
|
+
}
|
|
79
|
+
throw _error;
|
|
80
|
+
})) {
|
|
81
|
+
return res.status(403).json({ message: 'Unverified signature' });
|
|
82
|
+
}
|
|
83
|
+
}
|
|
84
|
+
const { headers: targetHeaders, params: targetParams } = (0, shared_1.ensureObject)(safelistedTarget);
|
|
85
|
+
if ((0, shared_1.objectNotEmpty)(targetParams)) {
|
|
86
|
+
targetPath = (0, shared_1.appendQuery)(targetPath, new URLSearchParams(targetParams).toString());
|
|
87
|
+
}
|
|
88
|
+
const _prepareHeaders = (0, utils_1.prepareHeaders)(serverRuntimeConfig);
|
|
89
|
+
headers = yield _prepareHeaders({
|
|
90
|
+
generateReplacements,
|
|
91
|
+
shop,
|
|
92
|
+
appId,
|
|
93
|
+
headers: Object.assign(Object.assign({}, _headers), targetHeaders),
|
|
94
|
+
});
|
|
86
95
|
}
|
|
87
|
-
|
|
88
|
-
|
|
89
|
-
|
|
96
|
+
catch (error) {
|
|
97
|
+
console.error(`Error handling proxy request for '${targetPath}'`, error);
|
|
98
|
+
return res.status(200).json({ message: (error === null || error === void 0 ? void 0 : error.message) || 'Error handling proxy request', targetPath });
|
|
90
99
|
}
|
|
91
|
-
const _prepareHeaders = (0, utils_1.prepareHeaders)(serverRuntimeConfig);
|
|
92
|
-
const headers = yield _prepareHeaders({
|
|
93
|
-
generateReplacements,
|
|
94
|
-
shop,
|
|
95
|
-
appId,
|
|
96
|
-
headers: Object.assign(Object.assign({}, _headers), targetHeaders),
|
|
97
|
-
});
|
|
98
100
|
const proxy = http_proxy_1.default.createProxy();
|
|
99
101
|
return new Promise((_resolve, reject) => {
|
|
100
102
|
req.url = targetPath;
|
|
101
|
-
|
|
103
|
+
if (headers) {
|
|
104
|
+
req.headers = headers;
|
|
105
|
+
}
|
|
102
106
|
proxy.once('error', reject);
|
|
103
107
|
proxy.web(req, res, {
|
|
104
108
|
target,
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":";;;;AAAA,sDAAsD;AACtD,sEAAkC;AAClC,oEAAkC;AAElC,
|
|
1
|
+
{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":";;;;AAAA,sDAAsD;AACtD,sEAAkC;AAClC,oEAAkC;AAElC,uCAKoB;AACpB,4CAawB;AAExB,MAAM,aAAa,GAAG,IAAI,CAAA,CAAC,kBAAkB;AAE7C,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;IACpE,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,IAAA,6BAAoB,EAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;IAEvE,OAAO,IAAA,qBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,CAAA;AACvC,CAAC,CAAA;AAEM,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;;IACrF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;IAC7C,MAAM,EACJ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,GAAG,mBAAmB,CAAA;IACvB,MAAM,KAOF,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,EAPf,EACJ,MAAM,EACN,iBAAiB,EAAE,WAAW,EAC9B,mBAAmB,EAAE,aAAa,EAClC,kBAAkB,EAAE,WAAW,EAC/B,gBAAgB,EAAE,WAAW,OAEV,EADhB,QAAQ,sBANP,wFAOL,CAAoB,CAAA;IAErB,MAAM,EACJ,qBAAqB,EAAE,YAAY,EACnC,mBAAmB,EAAE,cAAc,EACnC,eAAe,EAAE,gBAAgB,EACjC,uBAAuB,EAAE,uBAAuB,EAChD,gBAAgB,EAAE,UAAU,GAAG,uBAAuB,aAAvB,uBAAuB,cAAvB,uBAAuB,GAAI,gBAAgB,EAC1E,kBAAkB,EAAE,KAAK;IACzB,sDAAsD;MACvD,GAAG,QAAQ,CAAA;IAEZ,yDAAyD;IACzD,IAAI,IAAA,oBAAW,EAAC,MAAM,CAAC,EAAE;QACvB,GAAG,CAAC,OAAO,mCACN,GAAG,CAAC,OAAO,KACd,MAAM,EAAE,WAAW,IAAI,WAAW,GACnC,CAAA;KACF;IAED,MAAM,KAA6C,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,EAA5D,EAAE,SAAS,EAAE,YAAY,OAAmC,EAA9B,UAAU,sBAAxC,6BAA0C,CAAkB,CAAA;IAClE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,UAAU,CAAA;IAChE,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAA;IAEhC,MAAM,IAAA,qBAAQ,EAAC,GAAG,EAAE,GAAG,EAAE;QACvB,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;QAC3C,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;YAC3B,MAAM,YAAY,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE;gBACzC,GAAG,eAAe;gBAClB,iBAAiB,CAAC,sDAAsD;aACzE,CAAC,CAAA;YAEF,IAAI,YAAY,EAAE;gBAChB,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;aAC5B;YAED,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA;QACnD,CAAC;QACD,oBAAoB,EAAE,GAAG,EAAE,6DAA6D;KACzF,CAAC,CAAA;IAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;IAC5C,MAAM,UAAU,GAAG,CAAC,IAAA,oBAAW,EAAC,WAAW,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAA,2BAAkB,EAAC,WAAW,CAAC,EAAE,CAAA;IACpJ,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAA,uBAAc,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;IAC5G,IAAI,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,uBAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;IACnE,IAAI,OAAO,CAAA;IAEX,IAAI;QACF,MAAM,gBAAgB,GAAG,IAAA,sBAAa,EAAC,QAAQ,kBAC7C,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,EAAE;gBAChC,gHAAgH;gBAChH,aAAa;gBACb,uDAAuD;gBACvD,KAAK;gBACL,MAAM,EAAE;oBACN,IAAI;oBACJ,IAAI;iBACL;aACF,IACE,eAAe,EAClB,CAAA;QAEF,IAAI,IAAA,oBAAW,EAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,EAAE;YAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAA;SAC/D;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE;YACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,cAAc,EAAE,CAAC,CAAA;SACvF;QAED,MAAM,yBAAyB,GAAG,IAAA,uBAAc,EAC9C,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,IAAA,qBAAY,EAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;YAC7C,CAAC,CAAC,WAAW,CAChB,CAAA;QAED,mFAAmF;QACnF,IAAI,CAAC,uBAAuB,CAC1B,SAAS,EACT,UAAU,EACV,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAChE,EAAE;YACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAA;SAC9D;QAED,IAAI,WAAW,KAAK,SAAS,CAAC,wBAAe,CAAC,aAAa,CAAC,EAAE;YAC5D,MAAM,uBAAuB,GAAG,IAAA,8BAAsB,EAAC,mBAAmB,CAAC,CAAA;YAC3E,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC1E,IAAI,MAAM,YAAY,mCAA0B,EAAE;oBAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;iBACzD;gBACD,MAAM,MAAM,CAAA;YACd,CAAC,CAAC,EAAE;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAA;aACjE;SACF;QAED,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,qBAAY,EAAC,gBAAgB,CAAC,CAAA;QACvF,IAAI,IAAA,uBAAc,EAAC,YAAY,CAAC,EAAE;YAChC,UAAU,GAAG,IAAA,oBAAW,EAAC,UAAU,EAAE,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;SACnF;QAED,MAAM,eAAe,GAAG,IAAA,sBAAc,EAAC,mBAAmB,CAAC,CAAA;QAC3D,OAAO,GAAG,MAAM,eAAe,CAAC;YAC9B,oBAAoB;YACpB,IAAI;YACJ,KAAK;YACL,OAAO,kCACF,QAAQ,GACR,aAAa,CACjB;SACF,CAAC,CAAA;KACH;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,UAAU,GAAG,EAAE,KAAK,CAAC,CAAA;QACxE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,KAAI,8BAA8B,EAAE,UAAU,EAAE,CAAC,CAAA;KACvG;IAED,MAAM,KAAK,GAAG,oBAAS,CAAC,WAAW,EAAE,CAAA;IACrC,OAAO,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;QACtC,GAAG,CAAC,GAAG,GAAG,UAAU,CAAA;QACpB,IAAI,OAAO,EAAE;YACX,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;SACtB;QAED,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,MAAM,CAAC,CAAA;QAE3B,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;YAClB,MAAM;YACN,OAAO,EAAE,aAAa;YACtB,YAAY,EAAE,aAAa;YAC3B,eAAe,EAAE,KAAK;YACtB,YAAY,EAAE,IAAI;YAClB,MAAM,EAAE,IAAI;SACb,CAAC,CAAA;IACJ,CAAC,CAAC,CAAA;AACJ,CAAC,CAAA,CAAA;AAvJY,QAAA,WAAW,eAuJvB"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":"AASO;;sDAqEN"}
|
|
@@ -6,54 +6,52 @@ const raw_body_1 = tslib_1.__importDefault(require("raw-body"));
|
|
|
6
6
|
const js_base64_1 = require("js-base64");
|
|
7
7
|
const jsonwebtoken_1 = require("jsonwebtoken");
|
|
8
8
|
const uuid_1 = require("uuid");
|
|
9
|
-
const next_plugins_1 = require("@agnostack/next-plugins");
|
|
10
9
|
const utils_1 = require("../../utils");
|
|
11
10
|
const shared_1 = require("../../../shared");
|
|
12
11
|
// NOTE: typically handling: "/api/token"
|
|
13
12
|
const handleSessionToken = ({ APP_CONFIG }, config) => (req, res) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
|
|
14
13
|
var _a, _b;
|
|
15
14
|
const { host } = (_a = req.query) !== null && _a !== void 0 ? _a : {};
|
|
16
|
-
|
|
17
|
-
|
|
18
|
-
console.log(`>>> > handleSessionToken > shop:`, shop);
|
|
19
|
-
// TODO: un-btoa the host and check
|
|
15
|
+
const { 'x-shop-domain': shopDomain, 'x-shopify-shop-domain': shopifyShopDomain, 'x-shopify-shop': shop = shopifyShopDomain !== null && shopifyShopDomain !== void 0 ? shopifyShopDomain : shopDomain, } = (_b = req.headers) !== null && _b !== void 0 ? _b : {};
|
|
16
|
+
// TODO: un-btoa the host and check??
|
|
20
17
|
if ((0, shared_1.stringEmpty)(shop) || (0, shared_1.stringEmpty)(host)) {
|
|
21
18
|
return res.status(412).json({ message: 'Missing required param' });
|
|
22
19
|
}
|
|
23
|
-
|
|
24
|
-
|
|
25
|
-
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
dest
|
|
20
|
+
let token;
|
|
21
|
+
try {
|
|
22
|
+
// NOTE raw request body is required for validation
|
|
23
|
+
const _rawBody = yield (0, raw_body_1.default)(req);
|
|
24
|
+
const rawBody = _rawBody.toString();
|
|
25
|
+
const _c = JSON.parse(rawBody), { sub, aud = APP_CONFIG.apiKey } = _c, _body = tslib_1.__rest(_c, ["sub", "aud"]);
|
|
26
|
+
let { dest, iss, sid, jti } = _body, body = tslib_1.__rest(_body, ["dest", "iss", "sid", "jti"]);
|
|
27
|
+
if ((0, shared_1.stringEmpty)(dest)) {
|
|
28
|
+
dest = shop;
|
|
29
|
+
}
|
|
30
|
+
if ((0, shared_1.stringEmpty)(iss)) {
|
|
31
|
+
iss = (0, js_base64_1.decode)(host);
|
|
32
|
+
}
|
|
33
|
+
if ((0, shared_1.stringEmpty)(sid)) {
|
|
34
|
+
sid = (0, uuid_1.v4)();
|
|
35
|
+
}
|
|
36
|
+
if ((0, shared_1.stringEmpty)(jti)) {
|
|
37
|
+
jti = (0, uuid_1.v4)();
|
|
38
|
+
sid = `${sid}.${jti}`;
|
|
39
|
+
}
|
|
40
|
+
const payload = Object.assign(Object.assign({ shop,
|
|
41
|
+
host,
|
|
42
|
+
iss,
|
|
43
|
+
dest,
|
|
44
|
+
jti,
|
|
45
|
+
sid,
|
|
46
|
+
aud }, sub && { sub }), body);
|
|
47
|
+
const hmac = (0, utils_1.generateHMAC)((0, shared_1.objectToSortedString)(payload), APP_CONFIG.apiSecretKey);
|
|
48
|
+
token = (0, jsonwebtoken_1.sign)(payload, hmac, config);
|
|
31
49
|
}
|
|
32
|
-
|
|
33
|
-
|
|
50
|
+
catch (error) {
|
|
51
|
+
console.error('Error generating session token', error);
|
|
52
|
+
return res.status(500).json({ message: 'Error generating session token' });
|
|
34
53
|
}
|
|
35
|
-
if ((0, next_plugins_1.stringNotEmpty)(sid)) {
|
|
36
|
-
sid = (0, uuid_1.v4)();
|
|
37
|
-
}
|
|
38
|
-
if ((0, shared_1.stringEmpty)(jti)) {
|
|
39
|
-
jti = (0, uuid_1.v4)();
|
|
40
|
-
sid = `${sid}.${jti}`;
|
|
41
|
-
}
|
|
42
|
-
const payload = Object.assign(Object.assign({ shop,
|
|
43
|
-
host,
|
|
44
|
-
iss,
|
|
45
|
-
dest,
|
|
46
|
-
jti,
|
|
47
|
-
sid,
|
|
48
|
-
aud }, sub && { sub }), body);
|
|
49
|
-
console.log(`>>> > handleSessionToken > payload:`, payload);
|
|
50
|
-
// HMMM: not sure which key (pub vs private) to use here??
|
|
51
|
-
const hmac = (0, utils_1.generateHMAC)((0, shared_1.objectToSortedString)(payload), APP_CONFIG.apiSecretKey);
|
|
52
|
-
const token = (0, jsonwebtoken_1.sign)(payload, hmac, config);
|
|
53
|
-
console.log(`>>> > handleSessionToken > token:`, token);
|
|
54
|
-
// TODO: pass options for other stuff a second param
|
|
55
54
|
return res.status(200).json({ token });
|
|
56
55
|
});
|
|
57
56
|
exports.handleSessionToken = handleSessionToken;
|
|
58
|
-
// must be called w host query AND w/ x-shop header?
|
|
59
57
|
//# sourceMappingURL=token.js.map
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AACjC,yCAAkC;AAClC,+CAAmC;AACnC,+BAAmC;AAEnC,
|
|
1
|
+
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AACjC,yCAAkC;AAClC,+CAAmC;AACnC,+BAAmC;AAEnC,uCAA0C;AAC1C,4CAAmE;AAEnE,yCAAyC;AAClC,MAAM,kBAAkB,GAAG,CAAC,EAAE,UAAU,EAAE,EAAE,MAAM,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC/E,MAAM,EAAE,IAAI,EAAE,GAAG,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,CAAA;IAChC,MAAM,EACJ,eAAe,EAAE,UAAU,EAC3B,uBAAuB,EAAE,iBAAiB,EAC1C,gBAAgB,EAAE,IAAI,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,UAAU,GACzD,GAAG,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,CAAA;IAErB,qCAAqC;IACrC,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;QAC1C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;KACnE;IAED,IAAI,KAAK,CAAA;IACT,IAAI;QACF,mDAAmD;QACnD,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACnC,MAAM,KAIF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAJjB,EACJ,GAAG,EACH,GAAG,GAAG,UAAU,CAAC,MAAM,OAEF,EADlB,KAAK,sBAHJ,cAIL,CAAsB,CAAA;QAEvB,IAAI,EACF,IAAI,EACJ,GAAG,EACH,GAAG,EACH,GAAG,KAED,KAAK,EADJ,IAAI,kBACL,KAAK,EANL,6BAMH,CAAQ,CAAA;QAET,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;YACrB,IAAI,GAAG,IAAI,CAAA;SACZ;QAED,IAAI,IAAA,oBAAW,EAAC,GAAG,CAAC,EAAE;YACpB,GAAG,GAAG,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAA;SACnB;QAED,IAAI,IAAA,oBAAW,EAAC,GAAG,CAAC,EAAE;YACpB,GAAG,GAAG,IAAA,SAAM,GAAE,CAAA;SACf;QAED,IAAI,IAAA,oBAAW,EAAC,GAAG,CAAC,EAAE;YACpB,GAAG,GAAG,IAAA,SAAM,GAAE,CAAA;YACd,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;SACtB;QAED,MAAM,OAAO,iCACX,IAAI;YACJ,IAAI;YACJ,GAAG;YACH,IAAI;YACJ,GAAG;YACH,GAAG;YACH,GAAG,IACA,GAAG,IAAI,EAAE,GAAG,EAAE,GACd,IAAI,CACR,CAAA;QAED,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,IAAA,6BAAoB,EAAC,OAAO,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;QACjF,KAAK,GAAG,IAAA,mBAAI,EAAC,OAAO,EAAE,IAAI,EAAE,MAAM,CAAC,CAAA;KACpC;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAA;QACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;KAC3E;IAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;AACxC,CAAC,CAAA,CAAA;AArEY,QAAA,kBAAkB,sBAqE9B"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/uninstall.js"],"names":[],"mappings":"AASO,
|
|
1
|
+
{"version":3,"file":"uninstall.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/uninstall.js"],"names":[],"mappings":"AASO,qGAwCN"}
|
|
@@ -9,7 +9,7 @@ const shared_1 = require("../../../shared");
|
|
|
9
9
|
const handleAppUninstalled = (serverRuntimeConfig) => (req, res) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
|
|
10
10
|
var _a;
|
|
11
11
|
try {
|
|
12
|
-
const { 'x-shopify-shop-domain': shop } = (_a = req.headers) !== null && _a !== void 0 ? _a : {};
|
|
12
|
+
const { 'x-shop-domain': shopDomain, 'x-shopify-shop-domain': shopifyShopDomain, 'x-shopify-shop': shop = shopifyShopDomain !== null && shopifyShopDomain !== void 0 ? shopifyShopDomain : shopDomain, } = (_a = req.headers) !== null && _a !== void 0 ? _a : {};
|
|
13
13
|
if ((0, shared_1.stringEmpty)(shop)) {
|
|
14
14
|
return res.status(200).json({ handler: 'uninstall', error: 'Missing shop' });
|
|
15
15
|
}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/uninstall.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AAEjC,uCAA+C;AAC/C,4CAGwB;AAExB,4DAA4D;AACrD,MAAM,oBAAoB,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC9E,IAAI;QACF,MAAM,EAAE,uBAAuB,EAAE,
|
|
1
|
+
{"version":3,"file":"uninstall.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/uninstall.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AAEjC,uCAA+C;AAC/C,4CAGwB;AAExB,4DAA4D;AACrD,MAAM,oBAAoB,GAAG,CAAC,mBAAmB,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;IAC9E,IAAI;QACF,MAAM,EACJ,eAAe,EAAE,UAAU,EAC3B,uBAAuB,EAAE,iBAAiB,EAC1C,gBAAgB,EAAE,IAAI,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,UAAU,GACzD,GAAG,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,CAAA;QAErB,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;YACrB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC,CAAA;SAC7E;QAED,MAAM,EAAE,OAAO,EAAE,cAAc,EAAE,cAAc,EAAE,GAAG,MAAM,IAAA,yBAAiB,EAAC,mBAAmB,EAAE,EAAE,IAAI,EAAE,CAAC,CAAA;QAE1G,mEAAmE;QACnE,MAAM,OAAO,GAAG,MAAM,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAA;QACrC,MAAM,KAA6B,MAAM,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC;YACjE,OAAO,EAAE,OAAO,CAAC,QAAQ,EAAE;YAC3B,UAAU,EAAE,GAAG;YACf,WAAW,EAAE,GAAG;SACjB,CAAC,EAJI,EAAE,KAAK,OAIX,EAJgB,YAAY,sBAAxB,SAA0B,CAI9B,CAAA;QAEF,IAAI,KAAK,EAAE;YACT,IAAI;gBACF,MAAM,WAAW,GAAG,MAAM,cAAc,CAAC,IAAI,CAAC,CAAA;gBAC9C,IAAI,IAAA,sBAAa,EAAC,WAAW,CAAC,EAAE;oBAC9B,MAAM,cAAc,CAAC,WAAW,CAAC,CAAA;iBAClC;gBACD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAA;aAC1E;YAAC,OAAO,KAAK,EAAE;gBACd,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,EAAE,CAAC,CAAA;aAC7E;SACF;QAED,OAAO,CAAC,IAAI,CAAC,sCAAsC,EAAE,YAAY,CAAC,CAAA;QAClE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,sCAAsC,EAAE,CAAC,CAAA;KACrG;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,0BAA0B,EAAE,KAAK,CAAC,CAAA;QAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,KAAK,EAAE,0BAA0B,EAAE,CAAC,CAAA;KACzF;AACH,CAAC,CAAA,CAAA;AAxCY,QAAA,oBAAoB,wBAwChC"}
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/webhook.js"],"names":[],"mappings":"
|
|
1
|
+
{"version":3,"file":"webhook.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/webhook.js"],"names":[],"mappings":"AAWO,2HAyFN"}
|
|
@@ -5,29 +5,22 @@ const tslib_1 = require("tslib");
|
|
|
5
5
|
const raw_body_1 = tslib_1.__importDefault(require("raw-body"));
|
|
6
6
|
const utils_1 = require("../../utils");
|
|
7
7
|
const shared_1 = require("../../../shared");
|
|
8
|
-
// TODO: this should allow us to get the appId into the webhooks (param)
|
|
9
8
|
// NOTE: typically handling: "/api/webhooks/event" or "/api/webhooks/event/{appId}" or "/api/webhooks/event?appId={appId}"
|
|
10
9
|
const handleWebhookEvent = (serverRuntimeConfig, config) => (req, res, data) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
|
|
11
10
|
var _a;
|
|
12
|
-
console.log(`>>> > handleWebhookEvent > data:`, data);
|
|
13
11
|
const { ORIGIN_SAFELIST } = serverRuntimeConfig;
|
|
14
|
-
console.log(`>>> > handleWebhookEvent > ORIGIN_SAFELIST:`, ORIGIN_SAFELIST);
|
|
15
12
|
try {
|
|
16
|
-
const _b = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { 'x-shopify-shop-domain': shop } = _b, _headers = tslib_1.__rest(_b, ['x-shopify-shop-domain']);
|
|
17
|
-
console.log(`>>> > handleWebhookEvent > shop:`, { shop, _headers });
|
|
13
|
+
const _b = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { 'x-shop-domain': shopDomain, 'x-shopify-shop-domain': shopifyShopDomain, 'x-shopify-shop': shop = shopifyShopDomain !== null && shopifyShopDomain !== void 0 ? shopifyShopDomain : shopDomain } = _b, _headers = tslib_1.__rest(_b, ['x-shop-domain', 'x-shopify-shop-domain', 'x-shopify-shop']);
|
|
18
14
|
if ((0, shared_1.stringEmpty)(shop)) {
|
|
19
15
|
return res.status(200).json({ handler: 'webhook', error: 'Missing shop' });
|
|
20
16
|
}
|
|
21
|
-
console.log(`>>> > handleWebhookEvent > matchHostname(shop), ORIGIN_SAFELIST:`, (0, shared_1.matchHostname)(shop, ORIGIN_SAFELIST));
|
|
22
17
|
if (!(0, shared_1.matchHostname)(shop, ORIGIN_SAFELIST)) {
|
|
23
18
|
return res.status(200).json({ handler: 'webhook', error: 'Shop is not safelisted' });
|
|
24
19
|
}
|
|
25
20
|
const { shopify } = yield (0, utils_1.getShopifyHelpers)(serverRuntimeConfig, { shop });
|
|
26
|
-
console.log(`>>> > handleWebhookEvent > shopify:`, shopify);
|
|
27
21
|
// NOTE raw request body is required for Shopify webhook validation
|
|
28
22
|
const _rawBody = yield (0, raw_body_1.default)(req);
|
|
29
23
|
const rawBody = _rawBody.toString();
|
|
30
|
-
// TODO: note sure why we are failing validation?!?!
|
|
31
24
|
const _c = (serverRuntimeConfig.SHOPIFY_RUN_MODE === 'cli') ? {
|
|
32
25
|
valid: true,
|
|
33
26
|
topic: _headers['x-shopify-topic'],
|
|
@@ -63,8 +56,7 @@ const handleWebhookEvent = (serverRuntimeConfig, config) => (req, res, data) =>
|
|
|
63
56
|
handler.callback(topic, domain || shop, eventRawBody, webhookId, apiVersion, data)
|
|
64
57
|
];
|
|
65
58
|
}, []);
|
|
66
|
-
|
|
67
|
-
console.log(`>>> > handleWebhookEvent > foo:`, foo);
|
|
59
|
+
yield Promise.all([...topicHandlePromises, ...registrationHandlePromises]);
|
|
68
60
|
return res.status(200).json({ handler: 'webhook', message: 'success' });
|
|
69
61
|
}
|
|
70
62
|
catch (error) {
|