@agnostack/next-shopify 1.13.4-beta.4 → 1.13.4-beta.5
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/CHANGELOG.md
CHANGED
|
@@ -1,3 +1,10 @@
|
|
|
1
|
+
## [1.13.4-beta.5](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.4...v1.13.4-beta.5) (2023-11-27)
|
|
2
|
+
|
|
3
|
+
|
|
4
|
+
### Bug Fixes
|
|
5
|
+
|
|
6
|
+
* wip ([26e0379](https://github.com/agnostack/next-shopify/commit/26e0379e0a8c3934ae42a3ea28770eac2239dfd6))
|
|
7
|
+
|
|
1
8
|
## [1.13.4-beta.4](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.3...v1.13.4-beta.4) (2023-11-27)
|
|
2
9
|
|
|
3
10
|
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":"AAgBO,
|
|
1
|
+
{"version":3,"file":"token.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":"AAgBO,qHAuJN"}
|
|
@@ -13,33 +13,42 @@ const handleSessionToken = (serverRuntimeConfig, signingData) => {
|
|
|
13
13
|
const { keyPairs, APP_CONFIG, } = serverRuntimeConfig !== null && serverRuntimeConfig !== void 0 ? serverRuntimeConfig : {};
|
|
14
14
|
console.log(`>>> > handleSessionToken > keyPairs:`, keyPairs);
|
|
15
15
|
return (req, res) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
|
|
16
|
-
var _a, _b, _c;
|
|
16
|
+
var _a, _b, _c, _d;
|
|
17
17
|
const { host } = (_a = req.query) !== null && _a !== void 0 ? _a : {};
|
|
18
|
-
const
|
|
18
|
+
const _e = (_b = req.headers) !== null && _b !== void 0 ? _b : {}, {
|
|
19
19
|
// origin, // TODO: should we bring in next-cors??
|
|
20
20
|
authorization, 'x-public-key': apiKey, 'x-emphemeral-key': emphemeralPublicKey, 'x-authorization-timestamp': authTimestamp, 'x-shopify-app-installation-id': shopifyAppInstallationId, 'x-shopify-app-id': shopifyAppId, 'x-app-installation-id': appInstallationId = shopifyAppInstallationId, 'x-app-id': appId = shopifyAppId, 'x-key-id': keyId, // NOTE/TODO: these need to move to app metafields instead
|
|
21
21
|
// TODO: pass along providerSetId??
|
|
22
|
-
'x-shop-domain': shopDomain, 'x-shopify-shop-domain': shopifyShopDomain, 'x-shopify-shop': shop = shopifyShopDomain !== null && shopifyShopDomain !== void 0 ? shopifyShopDomain : shopDomain } =
|
|
22
|
+
'x-shop-domain': shopDomain, 'x-shopify-shop-domain': shopifyShopDomain, 'x-shopify-shop': shop = shopifyShopDomain !== null && shopifyShopDomain !== void 0 ? shopifyShopDomain : shopDomain } = _e, headers = tslib_1.__rest(_e, ["authorization", 'x-public-key', 'x-emphemeral-key', 'x-authorization-timestamp', 'x-shopify-app-installation-id', 'x-shopify-app-id', 'x-app-installation-id', 'x-app-id', 'x-key-id', 'x-shop-domain', 'x-shopify-shop-domain', 'x-shopify-shop']);
|
|
23
23
|
console.log(`>>> > handleSessionToken > req.headers:`, req.headers);
|
|
24
24
|
if (authorization) {
|
|
25
25
|
console.log(`>>> > next-shopify.handleSessionToken > authorization:`, authorization);
|
|
26
|
-
|
|
27
|
-
|
|
28
|
-
|
|
29
|
-
|
|
30
|
-
if (
|
|
31
|
-
|
|
32
|
-
|
|
33
|
-
|
|
34
|
-
|
|
35
|
-
|
|
36
|
-
|
|
37
|
-
|
|
38
|
-
|
|
39
|
-
|
|
40
|
-
|
|
26
|
+
const [authProtocol, authSignature] = (0, shared_1.ensureString)(authorization).split(' ');
|
|
27
|
+
console.log(`>>> > next-shopify.handleSessionToken > authProtocol, authSignature:`, { authProtocol, authSignature });
|
|
28
|
+
console.log(`>>> > return > keyPairs?.shared.publicKey:`, (_c = keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) === null || _c === void 0 ? void 0 : _c.publicKey);
|
|
29
|
+
// TEMP!!! remove this outer if check once fully implemented
|
|
30
|
+
if (apiKey && emphemeralPublicKey && (keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) && authTimestamp && authSignature && (authProtocol === 'HMAC-SHA256')) {
|
|
31
|
+
if (!apiKey || !emphemeralPublicKey || !(keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) || !authTimestamp || !authSignature || (authProtocol !== 'HMAC-SHA256')) {
|
|
32
|
+
return res.status(401).json({ message: 'Invalid or missing authorization' });
|
|
33
|
+
}
|
|
34
|
+
const body = JSON.parse((_d = req.body) !== null && _d !== void 0 ? _d : '{}');
|
|
35
|
+
console.log(`>>> > return > body:`, body);
|
|
36
|
+
const { derivedHMACKey } = yield shared_1.subtle.getVerificationKeys({
|
|
37
|
+
publicKey: emphemeralPublicKey,
|
|
38
|
+
privateKey: keyPairs.shared.privateKey,
|
|
39
|
+
});
|
|
40
|
+
console.log(`>>> > return > derivedHMACKey:`, derivedHMACKey);
|
|
41
|
+
const isValid = yield shared_1.subtle.verifyHMAC((0, shared_1.objectToSortedString)(Object.assign({ url: req.url, timestamp: authTimestamp }, body)), derivedHMACKey, authSignature);
|
|
42
|
+
console.log(`>>> > return > isValid:`, { isValid });
|
|
43
|
+
if (!isValid) {
|
|
44
|
+
return res.status(412).json({ message: 'Invalid or missing verification' });
|
|
45
|
+
}
|
|
41
46
|
}
|
|
42
47
|
}
|
|
48
|
+
// TODO: un-btoa the host and check??
|
|
49
|
+
if ((0, shared_1.stringEmpty)(shop) || (0, shared_1.stringEmpty)(host)) {
|
|
50
|
+
return res.status(412).json({ message: 'Missing required param' });
|
|
51
|
+
}
|
|
43
52
|
// NOTE/TODO: these need to move to app metafields instead
|
|
44
53
|
let signingSecret;
|
|
45
54
|
if (keyId && (keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.messenger) && (keyId == keyPairs.messenger)) {
|
|
@@ -49,16 +58,12 @@ const handleSessionToken = (serverRuntimeConfig, signingData) => {
|
|
|
49
58
|
const appClaims = Object.entries(headers).reduce((_appClaims, [headerKey, headerValue]) => (Object.assign(Object.assign({}, _appClaims), headerKey.startsWith('x-shopify-app-metafield-') && {
|
|
50
59
|
[(0, shared_1.snakecase)(headerKey.replace('x-shopify-app-metafield-', ''))]: headerValue,
|
|
51
60
|
})), Object.assign(Object.assign({}, appId && { app_id: (0, shared_1.normalizeShopifyId)(appId).id }), appInstallationId && { installation_id: (0, shared_1.normalizeShopifyId)(appInstallationId).id }));
|
|
52
|
-
// TODO: un-btoa the host and check??
|
|
53
|
-
if ((0, shared_1.stringEmpty)(shop) || (0, shared_1.stringEmpty)(host)) {
|
|
54
|
-
return res.status(412).json({ message: 'Missing required param' });
|
|
55
|
-
}
|
|
56
61
|
let token;
|
|
57
62
|
try {
|
|
58
63
|
// NOTE raw request body is required for validation
|
|
59
64
|
const _rawBody = yield (0, raw_body_1.default)(req);
|
|
60
65
|
const rawBody = _rawBody.toString();
|
|
61
|
-
const
|
|
66
|
+
const _f = JSON.parse(rawBody), { sub, aud = APP_CONFIG.apiKey } = _f, _body = tslib_1.__rest(_f, ["sub", "aud"]);
|
|
62
67
|
let { dest, iss, sid, jti } = _body, body = tslib_1.__rest(_body, ["dest", "iss", "sid", "jti"]);
|
|
63
68
|
if ((0, shared_1.stringEmpty)(dest)) {
|
|
64
69
|
dest = shop;
|
|
@@ -1 +1 @@
|
|
|
1
|
-
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AACjC,yCAAkC;AAClC,+CAAmC;AACnC,+BAAmC;AAEnC,uCAA0C;AAC1C,4CAOwB;AAExB,yCAAyC;AAClC,MAAM,kBAAkB,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE;IACrE,MAAM,EACJ,QAAQ,EACR,UAAU,GACX,GAAG,mBAAmB,aAAnB,mBAAmB,cAAnB,mBAAmB,GAAI,EAAE,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC,CAAA;IAE7D,OAAO,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,CAAA;QAChC,MAAM,KAgBF,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,EAhBf;QACJ,kDAAkD;QAClD,aAAa,EACb,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,mBAAmB,EACvC,2BAA2B,EAAE,aAAa,EAC1C,+BAA+B,EAAE,wBAAwB,EACzD,kBAAkB,EAAE,YAAY,EAChC,uBAAuB,EAAE,iBAAiB,GAAG,wBAAwB,EACrE,UAAU,EAAE,KAAK,GAAG,YAAY,EAChC,UAAU,EAAE,KAAK,EAAE,0DAA0D;QAC7E,mCAAmC;QACnC,eAAe,EAAE,UAAU,EAC3B,uBAAuB,EAAE,iBAAiB,EAC1C,gBAAgB,EAAE,IAAI,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,UAAU,OAErC,EADhB,OAAO,sBAfN,oPAgBL,CAAoB,CAAA;QACrB,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QAEnE,IAAI,aAAa,EAAE;YACjB,OAAO,CAAC,GAAG,CAAC,wDAAwD,EAAE,aAAa,CAAC,CAAA;
|
|
1
|
+
{"version":3,"file":"token.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/token.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AACjC,yCAAkC;AAClC,+CAAmC;AACnC,+BAAmC;AAEnC,uCAA0C;AAC1C,4CAOwB;AAExB,yCAAyC;AAClC,MAAM,kBAAkB,GAAG,CAAC,mBAAmB,EAAE,WAAW,EAAE,EAAE;IACrE,MAAM,EACJ,QAAQ,EACR,UAAU,GACX,GAAG,mBAAmB,aAAnB,mBAAmB,cAAnB,mBAAmB,GAAI,EAAE,CAAA;IAC7B,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,QAAQ,CAAC,CAAA;IAE7D,OAAO,CAAO,GAAG,EAAE,GAAG,EAAE,EAAE;;QACxB,MAAM,EAAE,IAAI,EAAE,GAAG,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,CAAA;QAChC,MAAM,KAgBF,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,EAhBf;QACJ,kDAAkD;QAClD,aAAa,EACb,cAAc,EAAE,MAAM,EACtB,kBAAkB,EAAE,mBAAmB,EACvC,2BAA2B,EAAE,aAAa,EAC1C,+BAA+B,EAAE,wBAAwB,EACzD,kBAAkB,EAAE,YAAY,EAChC,uBAAuB,EAAE,iBAAiB,GAAG,wBAAwB,EACrE,UAAU,EAAE,KAAK,GAAG,YAAY,EAChC,UAAU,EAAE,KAAK,EAAE,0DAA0D;QAC7E,mCAAmC;QACnC,eAAe,EAAE,UAAU,EAC3B,uBAAuB,EAAE,iBAAiB,EAC1C,gBAAgB,EAAE,IAAI,GAAG,iBAAiB,aAAjB,iBAAiB,cAAjB,iBAAiB,GAAI,UAAU,OAErC,EADhB,OAAO,sBAfN,oPAgBL,CAAoB,CAAA;QACrB,OAAO,CAAC,GAAG,CAAC,yCAAyC,EAAE,GAAG,CAAC,OAAO,CAAC,CAAA;QAEnE,IAAI,aAAa,EAAE;YACjB,OAAO,CAAC,GAAG,CAAC,wDAAwD,EAAE,aAAa,CAAC,CAAA;YAEpF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,IAAA,qBAAY,EAAC,aAAa,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YAC5E,OAAO,CAAC,GAAG,CAAC,sEAAsE,EAAE,EAAE,YAAY,EAAE,aAAa,EAAE,CAAC,CAAA;YACpH,OAAO,CAAC,GAAG,CAAC,4CAA4C,EAAE,MAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,0CAAE,SAAS,CAAC,CAAA;YACtF,4DAA4D;YAC5D,IAAI,MAAM,IAAI,mBAAmB,KAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAA,IAAI,aAAa,IAAI,aAAa,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,EAAE;gBAC3H,IAAI,CAAC,MAAM,IAAI,CAAC,mBAAmB,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAA,IAAI,CAAC,aAAa,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,EAAE;oBAChI,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAA;iBAC7E;gBAED,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,MAAA,GAAG,CAAC,IAAI,mCAAI,IAAI,CAAC,CAAA;gBACzC,OAAO,CAAC,GAAG,CAAC,sBAAsB,EAAE,IAAI,CAAC,CAAA;gBACzC,MAAM,EAAE,cAAc,EAAE,GAAG,MAAM,eAAM,CAAC,mBAAmB,CAAC;oBAC1D,SAAS,EAAE,mBAAmB;oBAC9B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;iBACvC,CAAC,CAAA;gBACF,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,cAAc,CAAC,CAAA;gBAE7D,MAAM,OAAO,GAAG,MAAM,eAAM,CAAC,UAAU,CACrC,IAAA,6BAAoB,kBAClB,GAAG,EAAE,GAAG,CAAC,GAAG,EACZ,SAAS,EAAE,aAAa,IACrB,IAAI,EACP,EACF,cAAc,EACd,aAAa,CACd,CAAA;gBACD,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,EAAC,OAAO,EAAC,CAAC,CAAA;gBACjD,IAAI,CAAC,OAAO,EAAE;oBACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;iBAC5E;aACF;SACF;QAED,qCAAqC;QACrC,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;YAC1C,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,wBAAwB,EAAE,CAAC,CAAA;SACnE;QAED,0DAA0D;QAC1D,IAAI,aAAa,CAAA;QACjB,IAAI,KAAK,KAAI,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,SAAS,CAAA,IAAI,CAAC,KAAK,IAAI,QAAQ,CAAC,SAAS,CAAC,EAAE;YACjE,WAAW,mCACN,WAAW,KACd,GAAG,EAAE,QAAQ,CAAC,SAAS,CAAC,SAAS,GAClC,CAAA;YAED,aAAa,GAAG,QAAQ,CAAC,SAAS,CAAC,UAAU,CAAA;SAC9C;QAED,MAAM,SAAS,GAAG,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,UAAU,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,EAAE,EAAE,CAAC,iCACtF,UAAU,GACV,SAAS,CAAC,UAAU,CAAC,0BAA0B,CAAC,IAAI;YACrD,CAAC,IAAA,kBAAS,EAAC,SAAS,CAAC,OAAO,CAAC,0BAA0B,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,WAAW;SAC5E,EACD,kCACG,KAAK,IAAI,EAAE,MAAM,EAAE,IAAA,2BAAkB,EAAC,KAAK,CAAC,CAAC,EAAE,EAAE,GACjD,iBAAiB,IAAI,EAAE,eAAe,EAAE,IAAA,2BAAkB,EAAC,iBAAiB,CAAC,CAAC,EAAE,EAAE,EACrF,CAAA;QAEF,IAAI,KAAK,CAAA;QACT,IAAI;YACF,mDAAmD;YACnD,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAA;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;YACnC,MAAM,KAIF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,EAJjB,EACJ,GAAG,EACH,GAAG,GAAG,UAAU,CAAC,MAAM,OAEF,EADlB,KAAK,sBAHJ,cAIL,CAAsB,CAAA;YAEvB,IAAI,EACF,IAAI,EACJ,GAAG,EACH,GAAG,EACH,GAAG,KAED,KAAK,EADJ,IAAI,kBACL,KAAK,EANL,6BAMH,CAAQ,CAAA;YAET,IAAI,IAAA,oBAAW,EAAC,IAAI,CAAC,EAAE;gBACrB,IAAI,GAAG,IAAI,CAAA;aACZ;YAED,IAAI,IAAA,oBAAW,EAAC,GAAG,CAAC,EAAE;gBACpB,GAAG,GAAG,IAAA,kBAAM,EAAC,IAAI,CAAC,CAAA;aACnB;YAED,IAAI,IAAA,oBAAW,EAAC,GAAG,CAAC,EAAE;gBACpB,GAAG,GAAG,IAAA,SAAM,GAAE,CAAA;aACf;YAED,IAAI,IAAA,oBAAW,EAAC,GAAG,CAAC,EAAE;gBACpB,GAAG,GAAG,IAAA,SAAM,GAAE,CAAA;gBACd,GAAG,GAAG,GAAG,GAAG,IAAI,GAAG,EAAE,CAAA;aACtB;YAED,MAAM,OAAO,+CACX,IAAI;gBACJ,IAAI;gBACJ,GAAG;gBACH,IAAI;gBACJ,GAAG;gBACH,GAAG;gBACH,GAAG,IACA,GAAG,IAAI,EAAE,GAAG,EAAE,GACd,SAAS,GACT,IAAI,CACR,CAAA;YAED,IAAI,CAAC,aAAa,EAAE;gBAClB,aAAa,GAAG,IAAA,oBAAY,EAAC,IAAA,6BAAoB,EAAC,OAAO,CAAC,EAAE,UAAU,CAAC,YAAY,CAAC,CAAA;aACrF;YAED,KAAK,GAAG,IAAA,mBAAI,EAAC,OAAO,EAAE,aAAa,EAAE,WAAW,CAAC,CAAA;SAClD;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,gCAAgC,EAAE,KAAK,CAAC,CAAA;YACtD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,gCAAgC,EAAE,CAAC,CAAA;SAC3E;QAED,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,KAAK,EAAE,CAAC,CAAA;IACxC,CAAC,CAAA,CAAA;AACH,CAAC,CAAA;AAvJY,QAAA,kBAAkB,sBAuJ9B"}
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@agnostack/next-shopify",
|
|
3
|
-
"version": "1.13.4-beta.
|
|
3
|
+
"version": "1.13.4-beta.5",
|
|
4
4
|
"author": "agnoStack Dev <developers@agnostack.com> (https://agnostack.com)",
|
|
5
5
|
"owner": "agnoStack",
|
|
6
6
|
"description": "Please contact agnoStack via info@agnostack.com for any questions",
|