npm - @agnostack/next-shopify - Versions diffs - 1.13.4-beta.6 → 1.13.4-beta.61 - Mend

@agnostack/next-shopify 1.13.4-beta.6 → 1.13.4-beta.61

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (23) hide show

package/CHANGELOG.md +390 -0
package/dist/lib/handlers/api/proxy.d.ts.map +1 -1
package/dist/lib/handlers/api/proxy.js +135 -48
package/dist/lib/handlers/api/proxy.js.map +1 -1
package/dist/lib/handlers/api/token.d.ts.map +1 -1
package/dist/lib/handlers/api/token.js +83 -55
package/dist/lib/handlers/api/token.js.map +1 -1
package/dist/lib/utils/token.d.ts.map +1 -1
package/dist/lib/utils/token.js +1 -0
package/dist/lib/utils/token.js.map +1 -1
package/dist/shared/display.d.ts +5 -0
package/dist/shared/display.d.ts.map +1 -1
package/dist/shared/display.js +20 -1
package/dist/shared/display.js.map +1 -1
package/dist/shared/shopify.d.ts +5 -0
package/dist/shared/shopify.d.ts.map +1 -1
package/dist/shared/shopify.js +24 -1
package/dist/shared/shopify.js.map +1 -1
package/dist/shared/subtlecrypto.d.ts +1 -1
package/dist/shared/subtlecrypto.d.ts.map +1 -1
package/dist/shared/subtlecrypto.js +9 -3
package/dist/shared/subtlecrypto.js.map +1 -1
package/package.json +2 -1

package/CHANGELOG.md CHANGED Viewed

@@ -1,3 +1,393 @@
+## [1.13.4-beta.61](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.60...v1.13.4-beta.61) (2023-11-29)
+### Bug Fixes
+* wip ([76a671d](https://github.com/agnostack/next-shopify/commit/76a671d617d0ce3c5bb7ca6066c4a6d019d029ef))
+## [1.13.4-beta.60](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.59...v1.13.4-beta.60) (2023-11-29)
+### Bug Fixes
+* wip ([b9920c9](https://github.com/agnostack/next-shopify/commit/b9920c9dfa50abb2b7e6648e3bc662da309a9666))
+## [1.13.4-beta.59](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.58...v1.13.4-beta.59) (2023-11-29)
+### Bug Fixes
+* wip ([2381a56](https://github.com/agnostack/next-shopify/commit/2381a5641319e0b7f03e860c27e28a147872a79d))
+## [1.13.4-beta.58](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.57...v1.13.4-beta.58) (2023-11-29)
+### Bug Fixes
+* wip ([e5962d0](https://github.com/agnostack/next-shopify/commit/e5962d07ce2a3a6212826d8c5d32bdb4a538a0ea))
+## [1.13.4-beta.57](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.56...v1.13.4-beta.57) (2023-11-29)
+### Bug Fixes
+* wip ([b2545ea](https://github.com/agnostack/next-shopify/commit/b2545eabbc57a405c73d794e79a2d67d11527cc0))
+## [1.13.4-beta.56](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.55...v1.13.4-beta.56) (2023-11-29)
+### Bug Fixes
+* wip ([850a990](https://github.com/agnostack/next-shopify/commit/850a99069e4dee3e98ee5de449f428d296d29a7a))
+## [1.13.4-beta.55](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.54...v1.13.4-beta.55) (2023-11-29)
+### Bug Fixes
+* wip ([1ea8993](https://github.com/agnostack/next-shopify/commit/1ea8993f414ed6ee9458fb33a5a5a75b49da89d4))
+## [1.13.4-beta.54](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.53...v1.13.4-beta.54) (2023-11-29)
+### Bug Fixes
+* wip ([d83485e](https://github.com/agnostack/next-shopify/commit/d83485eff342c0f21e6a6a1a2bca6391ad1be670))
+## [1.13.4-beta.53](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.52...v1.13.4-beta.53) (2023-11-29)
+### Bug Fixes
+* wip ([567bc8f](https://github.com/agnostack/next-shopify/commit/567bc8f013927755e5fbe3b981cd1b5306254604))
+## [1.13.4-beta.52](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.51...v1.13.4-beta.52) (2023-11-29)
+### Bug Fixes
+* wip ([2c58a8a](https://github.com/agnostack/next-shopify/commit/2c58a8af9b8c36028b5762a6a847448d1594d328))
+## [1.13.4-beta.51](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.50...v1.13.4-beta.51) (2023-11-29)
+### Bug Fixes
+* wip ([8276744](https://github.com/agnostack/next-shopify/commit/8276744bc17785ce1af965d38f317d47ddd532c6))
+## [1.13.4-beta.50](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.49...v1.13.4-beta.50) (2023-11-29)
+### Bug Fixes
+* wip ([a0eb335](https://github.com/agnostack/next-shopify/commit/a0eb33528a9b47d36e8e2f9958e7bafd4bf17823))
+## [1.13.4-beta.49](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.48...v1.13.4-beta.49) (2023-11-29)
+### Bug Fixes
+* wip ([baef655](https://github.com/agnostack/next-shopify/commit/baef655a911b63187eaf1bf0764961ae13b02fe4))
+## [1.13.4-beta.48](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.47...v1.13.4-beta.48) (2023-11-29)
+### Bug Fixes
+* wip ([3315169](https://github.com/agnostack/next-shopify/commit/3315169925362a70daa7d6c4f4897f67b00f1519))
+## [1.13.4-beta.47](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.46...v1.13.4-beta.47) (2023-11-28)
+### Bug Fixes
+* wip ([dcbe873](https://github.com/agnostack/next-shopify/commit/dcbe87388d805f2ceafd16df7f3f527e8d28056c))
+## [1.13.4-beta.46](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.45...v1.13.4-beta.46) (2023-11-28)
+### Bug Fixes
+* wip ([d4433f3](https://github.com/agnostack/next-shopify/commit/d4433f3615b69bfdb208f82bbb96455acd256a21))
+## [1.13.4-beta.45](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.44...v1.13.4-beta.45) (2023-11-28)
+### Bug Fixes
+* wip ([c3b63f1](https://github.com/agnostack/next-shopify/commit/c3b63f10b89a3fac724ee296ce6744220aeaf74e))
+## [1.13.4-beta.44](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.43...v1.13.4-beta.44) (2023-11-28)
+### Bug Fixes
+* wip ([f344e66](https://github.com/agnostack/next-shopify/commit/f344e66e357e19ae0b2bd36539338fb3c7ef716f))
+## [1.13.4-beta.43](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.42...v1.13.4-beta.43) (2023-11-28)
+### Bug Fixes
+* wip ([137d947](https://github.com/agnostack/next-shopify/commit/137d947208da705d8c6159df85621535c553060c))
+## [1.13.4-beta.42](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.41...v1.13.4-beta.42) (2023-11-28)
+### Bug Fixes
+* wip ([b2aa001](https://github.com/agnostack/next-shopify/commit/b2aa0013f4d98bbedbb6e9576d0342049fedee82))
+## [1.13.4-beta.41](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.40...v1.13.4-beta.41) (2023-11-28)
+### Bug Fixes
+* wip ([7a5bc34](https://github.com/agnostack/next-shopify/commit/7a5bc3443e1a4b7e2ecb2961e9882f4dad5ca548))
+## [1.13.4-beta.40](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.39...v1.13.4-beta.40) (2023-11-28)
+### Bug Fixes
+* wip ([b6d011f](https://github.com/agnostack/next-shopify/commit/b6d011f3d36d6d8bf5d9761bf0738054f3c7390d))
+## [1.13.4-beta.39](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.38...v1.13.4-beta.39) (2023-11-28)
+### Bug Fixes
+* wip ([40ebc2d](https://github.com/agnostack/next-shopify/commit/40ebc2d8aa7163943647198d44a81b8d2c316315))
+## [1.13.4-beta.38](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.37...v1.13.4-beta.38) (2023-11-28)
+### Bug Fixes
+* wip ([85e558b](https://github.com/agnostack/next-shopify/commit/85e558bcd5ba9d13e2546f4a66439016ca154e2f))
+## [1.13.4-beta.37](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.36...v1.13.4-beta.37) (2023-11-28)
+### Bug Fixes
+* wip ([c5a2d49](https://github.com/agnostack/next-shopify/commit/c5a2d49fdf9488136a8ce08acbc2fea98998f0d8))
+## [1.13.4-beta.36](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.35...v1.13.4-beta.36) (2023-11-28)
+### Bug Fixes
+* wip ([d263615](https://github.com/agnostack/next-shopify/commit/d26361514e00dcbf401badf43c7690a1bde03332))
+## [1.13.4-beta.35](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.34...v1.13.4-beta.35) (2023-11-28)
+### Bug Fixes
+* wip ([e10b2ab](https://github.com/agnostack/next-shopify/commit/e10b2ab5aeae548ff7e11b707cba8fee1b5dcf15))
+## [1.13.4-beta.34](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.33...v1.13.4-beta.34) (2023-11-28)
+### Bug Fixes
+* wip ([6b7d57e](https://github.com/agnostack/next-shopify/commit/6b7d57ee40cda53abe88c869536f0092f98bd4dd))
+## [1.13.4-beta.33](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.32...v1.13.4-beta.33) (2023-11-28)
+### Bug Fixes
+* wip ([eaea443](https://github.com/agnostack/next-shopify/commit/eaea44343cb78de25156fa6def0893ad96f0699c))
+## [1.13.4-beta.32](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.31...v1.13.4-beta.32) (2023-11-28)
+### Bug Fixes
+* wip ([74082e8](https://github.com/agnostack/next-shopify/commit/74082e8e47120c534b673ed42f3459e0f7baffa0))
+## [1.13.4-beta.31](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.30...v1.13.4-beta.31) (2023-11-28)
+### Bug Fixes
+* updated lock file ([03a7d39](https://github.com/agnostack/next-shopify/commit/03a7d399000d86e6ee933f7709e5410bfb1981b4))
+## [1.13.4-beta.30](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.29...v1.13.4-beta.30) (2023-11-28)
+### Bug Fixes
+* updated lock file ([256e7d7](https://github.com/agnostack/next-shopify/commit/256e7d7c1f5c23e56e5fb8ae481b08b4980ab8e9))
+* wip ([64dceab](https://github.com/agnostack/next-shopify/commit/64dceabfd7272c204713ef424506ec0b7cc720b6))
+* wip ([b577f37](https://github.com/agnostack/next-shopify/commit/b577f377d5f2359365ae21ccb4da45a38c51dbb1))
+* wip ([26109e8](https://github.com/agnostack/next-shopify/commit/26109e867cda0c3917a30093dee14bc0e6061741))
+* wip ([c445db2](https://github.com/agnostack/next-shopify/commit/c445db2cd460af41de389db7137e0115681a8405))
+## [1.13.4-beta.29](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.28...v1.13.4-beta.29) (2023-11-28)
+### Bug Fixes
+* wip ([58b879d](https://github.com/agnostack/next-shopify/commit/58b879d2e18291c25da4e138075bb3a4889e2e75))
+## [1.13.4-beta.28](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.27...v1.13.4-beta.28) (2023-11-28)
+### Bug Fixes
+* wip ([a0a52af](https://github.com/agnostack/next-shopify/commit/a0a52af58ae125dc0ea679cc13c4d623f6367c98))
+## [1.13.4-beta.27](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.26...v1.13.4-beta.27) (2023-11-28)
+### Bug Fixes
+* wip ([1a7f5c9](https://github.com/agnostack/next-shopify/commit/1a7f5c93c5349e6e396784e7d5a21355cc95fc97))
+## [1.13.4-beta.26](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.25...v1.13.4-beta.26) (2023-11-28)
+### Bug Fixes
+* wip ([874da3f](https://github.com/agnostack/next-shopify/commit/874da3f0b247c08521e6e201264379c3fbe0d80a))
+## [1.13.4-beta.25](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.24...v1.13.4-beta.25) (2023-11-28)
+### Bug Fixes
+* wip ([ec34e7b](https://github.com/agnostack/next-shopify/commit/ec34e7b60d9a4fed434af6480f30a72a8bdb589a))
+## [1.13.4-beta.24](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.23...v1.13.4-beta.24) (2023-11-28)
+### Bug Fixes
+* wip ([7131f58](https://github.com/agnostack/next-shopify/commit/7131f5811d91cf438321826cd3f82f80d963dee9))
+## [1.13.4-beta.23](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.22...v1.13.4-beta.23) (2023-11-28)
+### Bug Fixes
+* wip ([fcc0135](https://github.com/agnostack/next-shopify/commit/fcc0135aecfcd2575ca228f9ff905ff9809db166))
+## [1.13.4-beta.22](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.21...v1.13.4-beta.22) (2023-11-28)
+### Bug Fixes
+* wip ([18a8099](https://github.com/agnostack/next-shopify/commit/18a8099ee2dd8e9323a1ea17f5299914e8a95a41))
+## [1.13.4-beta.21](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.20...v1.13.4-beta.21) (2023-11-28)
+### Bug Fixes
+* wip ([5dcd003](https://github.com/agnostack/next-shopify/commit/5dcd003c088ae7fd822803b7ac47f0ba8048b334))
+## [1.13.4-beta.20](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.19...v1.13.4-beta.20) (2023-11-28)
+### Bug Fixes
+* wip ([5bfb2da](https://github.com/agnostack/next-shopify/commit/5bfb2daf4852a6ba3dda7b7958c215bbc6c5c67f))
+## [1.13.4-beta.19](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.18...v1.13.4-beta.19) (2023-11-28)
+### Bug Fixes
+* wip ([fcfcb52](https://github.com/agnostack/next-shopify/commit/fcfcb52b69da5d0ecf281b2f56bbfe85048c6615))
+## [1.13.4-beta.18](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.17...v1.13.4-beta.18) (2023-11-28)
+### Bug Fixes
+* wip ([48835ab](https://github.com/agnostack/next-shopify/commit/48835ab2b7e2a5a9fb921619322bacb044fa37c4))
+## [1.13.4-beta.17](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.16...v1.13.4-beta.17) (2023-11-28)
+### Bug Fixes
+* wip ([f7fb508](https://github.com/agnostack/next-shopify/commit/f7fb50800b0b5e615d50e66d31a4ff7b0496ea35))
+## [1.13.4-beta.16](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.15...v1.13.4-beta.16) (2023-11-27)
+### Bug Fixes
+* wip ([cf0ca62](https://github.com/agnostack/next-shopify/commit/cf0ca626e227a54c45c0c12ed6ae5924c2222868))
+## [1.13.4-beta.15](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.14...v1.13.4-beta.15) (2023-11-27)
+### Bug Fixes
+* wip ([cea69da](https://github.com/agnostack/next-shopify/commit/cea69daea4f939b48ff25d67f694668b2f9307c4))
+## [1.13.4-beta.14](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.13...v1.13.4-beta.14) (2023-11-27)
+### Bug Fixes
+* wip ([7af14c7](https://github.com/agnostack/next-shopify/commit/7af14c71b29f7bf3d7a181cbf9dfb60ded81425b))
+## [1.13.4-beta.13](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.12...v1.13.4-beta.13) (2023-11-27)
+### Bug Fixes
+* wip ([7cc3648](https://github.com/agnostack/next-shopify/commit/7cc3648e80565295ab1e59be21784f5f7197054f))
+## [1.13.4-beta.12](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.11...v1.13.4-beta.12) (2023-11-27)
+### Bug Fixes
+* wip ([142e3d5](https://github.com/agnostack/next-shopify/commit/142e3d540c181035efbc9aee2663b1b263d34664))
+* wip ([03c326f](https://github.com/agnostack/next-shopify/commit/03c326fe0d5305df9df0e03a31417a9a6e737689))
+## [1.13.4-beta.11](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.10...v1.13.4-beta.11) (2023-11-27)
+### Bug Fixes
+* wip ([4403568](https://github.com/agnostack/next-shopify/commit/4403568128d7eb48f6f1c65466f44f9ef225701c))
+## [1.13.4-beta.10](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.9...v1.13.4-beta.10) (2023-11-27)
+### Bug Fixes
+* wip ([7e1b317](https://github.com/agnostack/next-shopify/commit/7e1b31755d1c4b715506e5018c21269be7c93a69))
+## [1.13.4-beta.9](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.8...v1.13.4-beta.9) (2023-11-27)
+### Bug Fixes
+* wip ([72a4ecc](https://github.com/agnostack/next-shopify/commit/72a4ecc06650b0876bae416205d143d81f1e74a2))
+## [1.13.4-beta.8](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.7...v1.13.4-beta.8) (2023-11-27)
+### Bug Fixes
+* wip ([ba69016](https://github.com/agnostack/next-shopify/commit/ba69016ef8ae6fec5146bbdbdb3b7d71bc48e3a5))
+## [1.13.4-beta.7](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.6...v1.13.4-beta.7) (2023-11-27)
+### Bug Fixes
+* wip ([4900495](https://github.com/agnostack/next-shopify/commit/4900495dfc07c53f8e6d17cca5c23da873a25f4e))
 ## [1.13.4-beta.6](https://github.com/agnostack/next-shopify/compare/v1.13.4-beta.5...v1.13.4-beta.6) (2023-11-27)

package/dist/lib/handlers/api/proxy.d.ts.map CHANGED Viewed

	@@ -1 +1 @@
1	- {"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":"~~AAiCO~~,~~sHA4JN~~"}
1	+ {"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":"AAsCO,sHA8QN"}

package/dist/lib/handlers/api/proxy.js CHANGED Viewed

@@ -5,6 +5,8 @@ const tslib_1 = require("tslib");
 /* eslint-disable @typescript-eslint/no-unused-vars */
 const nextjs_cors_1 = tslib_1.__importDefault(require("nextjs-cors"));
 const http_proxy_1 = tslib_1.__importDefault(require("http-proxy"));
+const raw_body_1 = tslib_1.__importDefault(require("raw-body"));
+const node_http_proxy_json_1 = tslib_1.__importDefault(require("node-http-proxy-json"));
 const utils_1 = require("../../utils");
 const shared_1 = require("../../../shared");
 const PROXY_TIMEOUT = 6000; // NOTE: 6 seconds
@@ -15,42 +17,53 @@ const verifyAppProxySignature = (signature, verifiable, hmacSecret) => {
 const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
     var _a, _b;
     const { generateReplacements } = config !== null && config !== void 0 ? config : {};
-    const { API_PATHS, APP_CONFIG, APP_BASE_URL, TARGET_SAFELIST, ORIGIN_SAFELIST, } = serverRuntimeConfig;
+    const { keyPairs, API_PATHS, APP_CONFIG, APP_BASE_URL, TARGET_SAFELIST, ORIGIN_SAFELIST, } = serverRuntimeConfig;
     const _c = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { origin, 'x-forwarded-for': _forwardFor, 'x-forwarded-proto': _forwardProto, 'x-forwarded-host': forwardHost, 'x-proxy-origin': proxyOrigin } = _c, _headers = tslib_1.__rest(_c, ["origin", 'x-forwarded-for', 'x-forwarded-proto', 'x-forwarded-host', 'x-proxy-origin']);
-    const { 'x-extension-session': sessionToken, 'x-extension-point': extensionPoint, 'x-shop-domain': shopDomainHeader, 'x-shopify-shop-domain': shopifyShopDomainHeader, 'x-shopify-shop': shopHeader = shopifyShopDomainHeader !== null && shopifyShopDomainHeader !== void 0 ? shopifyShopDomainHeader : shopDomainHeader,
+    const { authorization, // THIS
+    'x-public-key': apiKey, // THIS
+    'x-ephemeral-key': ephemeralPublicKey, // THIS
+    'x-authorization-timestamp': authTimestamp, // THIS
+    'x-extension-session': sessionToken, 'x-extension-point': extensionPoint, 'x-shop-domain': shopDomainHeader, 'x-shopify-shop-domain': shopifyShopDomainHeader, 'x-shopify-shop': shopHeader = shopifyShopDomainHeader !== null && shopifyShopDomainHeader !== void 0 ? shopifyShopDomainHeader : shopDomainHeader, 'x-shopify-app-id': shopifyAppId, 'x-app-id': appId = shopifyAppId,
     // 'x-shopify-app-installation-id': shopifyAppInstallationId,
-    'x-shopify-app-id': shopifyAppId,
     // 'x-app-installation-id': appInstallationId = shopifyAppInstallationId, // TODO: pass along installationId??
-    'x-app-id': appId = shopifyAppId,
     // TODO: pass along providerSetId??
      } = _headers;
-    // NOTE: GET requests are not always sending along origin
-    if ((0, shared_1.stringEmpty)(origin)) {
-        req.headers = Object.assign(Object.assign({}, req.headers), { origin: proxyOrigin || forwardHost });
-    }
-    const _d = (_b = req.query) !== null && _b !== void 0 ? _b : {}, { signature, proxyEncoded } = _d, verifiable = tslib_1.__rest(_d, ["signature", "proxyEncoded"]);
-    const { shop: _shop, host, timestamp, path_prefix } = verifiable;
-    const shop = _shop || shopHeader;
-    yield (0, nextjs_cors_1.default)(req, res, {
-        methods: ['PUT', 'PATCH', 'POST', 'DELETE'],
-        origin: (origin, callback) => {
-            const isSafelisted = (0, shared_1.matchHostname)(origin, [
-                ...ORIGIN_SAFELIST,
-                'cdn.shopify.com' // NOTE: this is the domain for checkout UI extensions
-            ]);
-            if (isSafelisted) {
-                return callback(null, true);
-            }
-            return callback(new Error('Invalid CORS origin'));
-        },
-        optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
-    });
-    const { target: targetParam } = params !== null && params !== void 0 ? params : {};
-    const _targetUrl = ((0, shared_1.stringEmpty)(targetParam) || targetParam.startsWith('http')) ? targetParam : `${APP_BASE_URL}/${(0, shared_1.removeLeadingSlash)(targetParam)}`;
-    const { origin: target, hostname, pathname, search } = (0, shared_1.stringNotEmpty)(_targetUrl) ? new URL(_targetUrl) : {};
-    let targetPath = [pathname, search].filter(shared_1.stringNotEmpty).join('');
-    let headers;
+    let targetPath;
     try {
+        const [authProtocol, authSignature] = (0, shared_1.ensureString)(authorization).split(' ');
+        const isVerifiable = (apiKey && ephemeralPublicKey && (keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) && authTimestamp && authSignature && (authProtocol === 'HMAC-SHA256'));
+        let verificationKeys;
+        // NOTE raw request body is required for shopify's validation
+        const _rawBody = yield (0, raw_body_1.default)(req);
+        const rawBody = _rawBody.toString();
+        const parsedBody = JSON.parse(rawBody || '{}'); // NOTE: parsedody should be encrypted when isVerifiable
+        let decryptedBody = parsedBody;
+        // NOTE: GET requests are not always sending along origin
+        if ((0, shared_1.stringEmpty)(origin)) {
+            req.headers = Object.assign(Object.assign({}, req.headers), { origin: proxyOrigin || forwardHost });
+        }
+        const _d = (_b = req.query) !== null && _b !== void 0 ? _b : {}, { signature, proxyEncoded } = _d, verifiable = tslib_1.__rest(_d, ["signature", "proxyEncoded"]);
+        const { shop: _shop, host, timestamp, path_prefix } = verifiable;
+        const shop = _shop || shopHeader;
+        yield (0, nextjs_cors_1.default)(req, res, {
+            methods: ['PUT', 'PATCH', 'POST', 'DELETE'],
+            origin: (origin, callback) => {
+                const isSafelisted = (0, shared_1.matchHostname)(origin, [
+                    ...ORIGIN_SAFELIST,
+                    'cdn.shopify.com' // NOTE: this is the domain for checkout UI extensions
+                ]);
+                if (isSafelisted) {
+                    return callback(null, true);
+                }
+                return callback(new Error('Invalid CORS origin'));
+            },
+            optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
+        });
+        const { target: targetParam } = params !== null && params !== void 0 ? params : {};
+        // eslint-disable-next-line max-len
+        const _targetUrl = ((0, shared_1.stringEmpty)(targetParam) || targetParam.startsWith('http')) ? targetParam : `${APP_BASE_URL}/${(0, shared_1.removeLeadingSlash)(targetParam)}`;
+        const { origin: target, hostname, pathname, search } = (0, shared_1.stringNotEmpty)(_targetUrl) ? new URL(_targetUrl) : {};
+        targetPath = [pathname, search].filter(shared_1.stringNotEmpty).join('');
         const safelistedTarget = (0, shared_1.matchHostname)(hostname, Object.assign({ [new URL(APP_BASE_URL).hostname]: {
                 // HMMM: can we generate our own session token so as to not have to tell handleGraph/Rest to behave as offline?
                 // headers: {
@@ -67,15 +80,22 @@ const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib
         if (!shop || !host || !extensionPoint || !signature || !proxyEncoded) {
             return res.status(400).json({ message: 'Invalid or missing headers', extensionPoint });
         }
+        // TODO: handle encrypt/decrypy only if !isShopifyOriginOrRelative??
         const isShopifyOriginOrRelative = (0, shared_1.stringNotEmpty)((0, shared_1.ensureString)(path_prefix).startsWith('http')
             ? (0, shared_1.sanitizeShop)(new URL(path_prefix).hostname)
             : path_prefix);
+        console.log(`>>> > handleProxy > isShopifyOriginOrRelative: '${targetPath}'`, {
+            path_prefix,
+            hostname,
+            fooName: new URL(APP_BASE_URL).hostname,
+            targetParam,
+            isShopifyOriginOrRelative,
+        });
         // TODO: once Shopify fixes CORS issue when origin is cdn.shopify.com, update this!
         if (!verifyAppProxySignature(signature, verifiable, isShopifyOriginOrRelative ? APP_CONFIG.apiSecretKey : timestamp)) {
             return res.status(403).json({ message: 'Invalid signature' });
         }
         // TODO: clean up targetParam.startsWith??
-        console.log(`>>> > handleProxy > targetParam:`, { sessionToken, targetParam });
         if (!targetParam.startsWith(API_PATHS[shared_1.API_ROUTE_NAMES.SESSION_TOKEN])) {
             const _getVerifiedSessionData = (0, utils_1.getVerifiedSessionData)(serverRuntimeConfig);
             if (!_getVerifiedSessionData(sessionToken, { shop, host }).catch((_error) => {
@@ -91,34 +111,101 @@ const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib
         if ((0, shared_1.objectNotEmpty)(targetParams)) {
             targetPath = (0, shared_1.appendQuery)(targetPath, new URLSearchParams(targetParams).toString());
         }
+        // TEMP!!! remove isVerifiable check once webwidget moved to react
+        if (isVerifiable) {
+            if (!apiKey || !ephemeralPublicKey || !(keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) || !authTimestamp || !authSignature || (authProtocol !== 'HMAC-SHA256')) {
+                return res.status(401).json({ message: 'Invalid or missing authorization' });
+            }
+            verificationKeys = yield shared_1.subtle.getVerificationKeys({
+                publicKey: ephemeralPublicKey,
+                privateKey: keyPairs.shared.privateKey,
+            });
+            if (!verificationKeys) {
+                return res.status(412).json({ message: 'Invalid or missing verification' });
+            }
+            const verificationPayload = (0, shared_1.objectToSortedString)(Object.assign({ method: (0, shared_1.getRequestMethod)(rawBody, req.method), timestamp: authTimestamp, body: parsedBody }, (0, shared_1.normalizeURIParts)(targetPath)));
+            const isValid = yield shared_1.subtle.verifyHMAC(verificationPayload, verificationKeys.derivedHMACKey, authSignature);
+            if (!isValid) {
+                return res.status(412).json({ message: 'Invalid or missing verification' });
+            }
+            if (rawBody) {
+                console.log(`>>> > handleProxy > rawBody: '${targetPath}'`, rawBody);
+                const decryptedMessage = yield shared_1.subtle.decryptMessage(parsedBody, verificationKeys.derivedSecretKey);
+                decryptedBody = JSON.parse(decryptedMessage !== null && decryptedMessage !== void 0 ? decryptedMessage : '{}');
+                console.log(`>>> > handleProxy > decryptedBody: '${targetPath}'`, decryptedBody);
+            }
+        }
         const _prepareHeaders = (0, utils_1.prepareHeaders)(serverRuntimeConfig);
-        headers = yield _prepareHeaders({
+        const headers = yield _prepareHeaders({
             generateReplacements,
             shop,
             appId,
             headers: Object.assign(Object.assign({}, _headers), targetHeaders),
         });
+        const proxy = http_proxy_1.default.createProxy();
+        return new Promise((resolve, reject) => {
+            req.url = targetPath;
+            if (headers) {
+                req.headers = headers;
+            }
+            proxy.on('proxyReq', (proxyReq, proxyReqRequest, proxyReqResponse, options) => {
+                console.log(`>>> > proxy.on > proxyReq:`, { decryptedBody, proxyReqRequestBody: proxyReqRequest.body, proxyReqRequest });
+                // Modify the request body before sending it to the target
+                if ((0, shared_1.objectNotEmpty)(decryptedBody)) {
+                    const bodyData = JSON.stringify(decryptedBody);
+                    console.log(`>>> > proxy.on > proxyReq > bodyData:`, bodyData);
+                    proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));
+                    proxyReq.write(bodyData);
+                    console.log(`>>> > proxy.on > proxyReq > AFTER 1`);
+                }
+                console.log(`>>> > proxy.on > proxyReq > AFTER 2`);
+            });
+            // proxy.on('proxyRes', function (proxyRes, req, res) {
+            //   console.log(`>>> > proxy.on > proxyRes`)
+            //   var body = []
+            //   proxyRes.on('data', function (chunk) {
+            //     body.push(chunk)
+            //   })
+            //   proxyRes.on('end', function () {
+            //     body = Buffer.concat(body).toString()
+            //     console.log("res from proxied server:", body)
+            //     res.end(JSON.stringify(decryptedBody))
+            //     return resolve()
+            //   })
+            // })
+            proxy.on('proxyRes', function (proxyRes, proxyResRequest, proxyResResponse) {
+                console.log(`>>> > proxy.on > proxyRes:`);
+                (0, node_http_proxy_json_1.default)(proxyResResponse, proxyRes, function (proxyResBody) {
+                    console.log(`>>> > proxy.on > proxyRes > modifyJSONProxy > proxyResBody:`, proxyResBody);
+                    if (!proxyResBody || !isVerifiable || !verificationKeys) {
+                        return proxyResBody;
+                    }
+                    return shared_1.subtle.encryptMessage(JSON.stringify(proxyResBody), verificationKeys.derivedSecretKey)
+                        .then((encrypedResBody) => {
+                        console.log(`>>> > proxy.on > proxyRes.then > encrypedResBody:`, encrypedResBody);
+                        return encrypedResBody;
+                    });
+                });
+            });
+            proxy.once('error', (error) => {
+                console.error('Proxy error', error);
+                reject(error);
+            });
+            proxy.web(req, res, {
+                target,
+                timeout: PROXY_TIMEOUT,
+                proxyTimeout: PROXY_TIMEOUT,
+                // selfHandleResponse : true, // HERE
+                followRedirects: false,
+                changeOrigin: true,
+                secure: true,
+            });
+        });
     }
     catch (error) {
         console.error(`Error handling proxy request for '${targetPath}'`, error);
         return res.status(200).json({ message: (error === null || error === void 0 ? void 0 : error.message) || 'Error handling proxy request', targetPath });
     }
-    const proxy = http_proxy_1.default.createProxy();
-    return new Promise((_resolve, reject) => {
-        req.url = targetPath;
-        if (headers) {
-            req.headers = headers;
-        }
-        proxy.once('error', reject);
-        proxy.web(req, res, {
-            target,
-            timeout: PROXY_TIMEOUT,
-            proxyTimeout: PROXY_TIMEOUT,
-            followRedirects: false,
-            changeOrigin: true,
-            secure: true,
-        });
-    });
 });
 exports.handleProxy = handleProxy;
 //# sourceMappingURL=proxy.js.map