@agnostack/next-shopify 1.13.5-beta.2 → 1.13.5-beta.4

package/CHANGELOG.md

@@ -1,3 +1,17 @@
+## [1.13.5-beta.4](https://github.com/agnostack/next-shopify/compare/v1.13.5-beta.3...v1.13.5-beta.4) (2023-11-29)
+
+
+### Bug Fixes
+
+* wip ([ecd3625](https://github.com/agnostack/next-shopify/commit/ecd36257e4cde1bbdea48b895934e82ecedf0612))
+
+## [1.13.5-beta.3](https://github.com/agnostack/next-shopify/compare/v1.13.5-beta.2...v1.13.5-beta.3) (2023-11-29)
+
+
+### Bug Fixes
+
+* wip ([825f688](https://github.com/agnostack/next-shopify/commit/825f688f614be631c13a70e1c652c45f742408ed))
+
 ## [1.13.5-beta.2](https://github.com/agnostack/next-shopify/compare/v1.13.5-beta.1...v1.13.5-beta.2) (2023-11-29)
 
 

package/dist/lib/handlers/api/proxy.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":"AAsCO,sHAgPN"}
+{"version":3,"file":"proxy.d.ts","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":"AAmCO,sHA4LN"}

package/dist/lib/handlers/api/proxy.js

@@ -5,7 +5,6 @@ const tslib_1 = require("tslib");
 /* eslint-disable @typescript-eslint/no-unused-vars */
 const nextjs_cors_1 = tslib_1.__importDefault(require("nextjs-cors"));
 const http_proxy_1 = tslib_1.__importDefault(require("http-proxy"));
-const raw_body_1 = tslib_1.__importDefault(require("raw-body"));
 const node_http_proxy_json_1 = tslib_1.__importDefault(require("node-http-proxy-json"));
 const utils_1 = require("../../utils");
 const shared_1 = require("../../../shared");
@@ -14,164 +13,136 @@ const verifyAppProxySignature = (signature, verifiable, hmacSecret) => {
     const hmac = (0, utils_1.generateHMAC)((0, shared_1.objectToSortedString)(verifiable), hmacSecret);
     return (0, utils_1.compareHashes)(signature, hmac);
 };
-const handleProxy = (serverRuntimeConfig, config) => (req, res, params) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
-    var _a, _b;
+const handleProxy = (serverRuntimeConfig, config) => {
     const { generateReplacements } = config !== null && config !== void 0 ? config : {};
-    const { keyPairs, API_PATHS, APP_CONFIG, APP_BASE_URL, TARGET_SAFELIST, ORIGIN_SAFELIST, } = serverRuntimeConfig;
-    const _c = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { origin, 'x-public-key': apiKey, 'x-ephemeral-key': ephemeralPublicKey, 'x-authorization-timestamp': customAuthTimestamp, 'x-authorization': customAuth, 'x-forwarded-for': _forwardFor, 'x-forwarded-proto': _forwardProto, 'x-forwarded-host': forwardHost, 'x-proxy-origin': proxyOrigin } = _c, _headers = tslib_1.__rest(_c, ["origin", 'x-public-key', 'x-ephemeral-key', 'x-authorization-timestamp', 'x-authorization', 'x-forwarded-for', 'x-forwarded-proto', 'x-forwarded-host', 'x-proxy-origin']);
-    const { 'x-extension-session': sessionToken, 'x-extension-point': extensionPoint, 'x-shop-domain': shopDomainHeader, 'x-shopify-shop-domain': shopifyShopDomainHeader, 'x-shopify-shop': shopHeader = shopifyShopDomainHeader !== null && shopifyShopDomainHeader !== void 0 ? shopifyShopDomainHeader : shopDomainHeader, 'x-shopify-app-id': shopifyAppId, 'x-app-id': appId = shopifyAppId,
-    // 'x-shopify-app-installation-id': shopifyAppInstallationId,
-    // 'x-app-installation-id': appInstallationId = shopifyAppInstallationId, // TODO: pass along installationId??
-    // TODO: pass along providerSetId??
-     } = _headers;
-    let targetPath;
-    try {
-        const [authProtocol, authSignature] = (0, shared_1.ensureString)(customAuth).split(' ');
-        const isVerifiable = (apiKey &&
-            ephemeralPublicKey &&
-            (keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) &&
-            customAuthTimestamp &&
-            authSignature &&
-            (authProtocol === 'HMAC-SHA256'));
-        let verificationKeys;
-        // NOTE raw request body is required for shopify's validation
-        const _rawBody = yield (0, raw_body_1.default)(req);
-        const rawBody = _rawBody.toString();
-        const parsedBody = JSON.parse(rawBody || '{}'); // NOTE: parsedBody should be encrypted when isVerifiable
-        let decryptedBody = parsedBody;
-        // NOTE: GET requests are not always sending along origin
-        if ((0, shared_1.stringEmpty)(origin)) {
-            req.headers = Object.assign(Object.assign({}, req.headers), { origin: proxyOrigin || forwardHost });
-        }
-        const _d = (_b = req.query) !== null && _b !== void 0 ? _b : {}, { signature, proxyEncoded } = _d, verifiable = tslib_1.__rest(_d, ["signature", "proxyEncoded"]);
-        const { shop: _shop, host, timestamp, path_prefix } = verifiable;
-        const shop = _shop || shopHeader;
-        yield (0, nextjs_cors_1.default)(req, res, {
-            methods: ['PUT', 'PATCH', 'POST', 'DELETE'],
-            origin: (origin, callback) => {
-                const isSafelisted = (0, shared_1.matchHostname)(origin, [
-                    ...ORIGIN_SAFELIST,
-                    'cdn.shopify.com' // NOTE: this is the domain for checkout UI extensions
-                ]);
-                if (isSafelisted) {
-                    return callback(null, true);
-                }
-                return callback(new Error('Invalid CORS origin'));
-            },
-            optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
-        });
-        const { target: targetParam } = params !== null && params !== void 0 ? params : {};
-        // eslint-disable-next-line max-len
-        const _targetUrl = ((0, shared_1.stringEmpty)(targetParam) || targetParam.startsWith('http')) ? targetParam : `${APP_BASE_URL}/${(0, shared_1.removeLeadingSlash)(targetParam)}`;
-        const { origin: target, hostname, pathname, search } = (0, shared_1.stringNotEmpty)(_targetUrl) ? new URL(_targetUrl) : {};
-        targetPath = [pathname, search].filter(shared_1.stringNotEmpty).join('');
-        const safelistedTarget = (0, shared_1.matchHostname)(hostname, Object.assign({ [new URL(APP_BASE_URL).hostname]: {
-                // HMMM: can we generate our own session token (or use the current one) so as to not have to tell handleGraph/Rest to behave as offline?
-                // headers: {
-                //   Authorization: 'Bearer {{setting.zendesk.token}}',
-                // },
-                params: {
-                    shop,
-                    host,
-                },
-            } }, TARGET_SAFELIST));
-        if ((0, shared_1.stringEmpty)(targetPath) || (safelistedTarget == undefined)) {
-            return res.status(407).json({ message: 'Unproxyable target' });
-        }
-        if (!shop || !host || !extensionPoint || !signature || !proxyEncoded) {
-            return res.status(400).json({ message: 'Invalid or missing headers', extensionPoint });
-        }
-        const isShopifyOriginOrRelative = (0, shared_1.stringNotEmpty)((0, shared_1.ensureString)(path_prefix).startsWith('http')
-            ? (0, shared_1.sanitizeShop)(new URL(path_prefix).hostname)
-            : path_prefix);
-        // TODO: once Shopify fixes CORS issue when origin is cdn.shopify.com, update this!
-        if (!verifyAppProxySignature(signature, verifiable, isShopifyOriginOrRelative ? APP_CONFIG.apiSecretKey : timestamp)) {
-            return res.status(403).json({ message: 'Invalid signature' });
-        }
-        // TODO: clean up targetParam.startsWith??
-        if (!targetParam.startsWith(API_PATHS[shared_1.API_ROUTE_NAMES.SESSION_TOKEN])) {
-            const _getVerifiedSessionData = (0, utils_1.getVerifiedSessionData)(serverRuntimeConfig);
-            if (!_getVerifiedSessionData(sessionToken, { shop, host }).catch((_error) => {
-                if (_error instanceof shared_1.ShopifySessionInvalidError) {
-                    return res.status(403).json({ message: _error.message });
-                }
-                throw _error;
-            })) {
-                return res.status(403).json({ message: 'Unverified signature' });
+    const { API_PATHS, APP_CONFIG, APP_BASE_URL, TARGET_SAFELIST, ORIGIN_SAFELIST, } = serverRuntimeConfig;
+    const _getVerifiedBody = (0, utils_1.getVerifiedBody)(serverRuntimeConfig);
+    return (req, res, params) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        var _a, _b;
+        const _c = (_a = req.headers) !== null && _a !== void 0 ? _a : {}, { origin, 
+        // 'x-public-key': apiKey,
+        // 'x-ephemeral-key': ephemeralPublicKey,
+        // 'x-authorization-timestamp': customAuthTimestamp,
+        // 'x-authorization': customAuth,
+        'x-forwarded-for': _forwardFor, 'x-forwarded-proto': _forwardProto, 'x-forwarded-host': forwardHost, 'x-proxy-origin': proxyOrigin } = _c, _headers = tslib_1.__rest(_c, ["origin", 'x-forwarded-for', 'x-forwarded-proto', 'x-forwarded-host', 'x-proxy-origin']);
+        const { 'x-extension-session': sessionToken, 'x-extension-point': extensionPoint, 'x-shop-domain': shopDomainHeader, 'x-shopify-shop-domain': shopifyShopDomainHeader, 'x-shopify-shop': shopHeader = shopifyShopDomainHeader !== null && shopifyShopDomainHeader !== void 0 ? shopifyShopDomainHeader : shopDomainHeader, 'x-shopify-app-id': shopifyAppId, 'x-app-id': appId = shopifyAppId,
+        // 'x-shopify-app-installation-id': shopifyAppInstallationId,
+        // 'x-app-installation-id': appInstallationId = shopifyAppInstallationId, // TODO: pass along installationId??
+        // TODO: pass along providerSetId??
+         } = _headers;
+        let targetPath;
+        try {
+            // NOTE: GET requests are not always sending along origin
+            if ((0, shared_1.stringEmpty)(origin)) {
+                req.headers = Object.assign(Object.assign({}, req.headers), { origin: proxyOrigin || forwardHost });
             }
-        }
-        const { headers: targetHeaders, params: targetParams } = (0, shared_1.ensureObject)(safelistedTarget);
-        if ((0, shared_1.objectNotEmpty)(targetParams)) {
-            targetPath = (0, shared_1.appendQuery)(targetPath, new URLSearchParams(targetParams).toString());
-        }
-        // TEMP!!! remove isVerifiable check once webwidget moved to react
-        if (isVerifiable) {
-            if (!apiKey || !ephemeralPublicKey || !(keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) || !customAuthTimestamp || !authSignature || (authProtocol !== 'HMAC-SHA256')) {
-                return res.status(401).json({ message: 'Invalid or missing authorization' });
-            }
-            verificationKeys = yield shared_1.subtle.getVerificationKeys({
-                publicKey: ephemeralPublicKey,
-                privateKey: keyPairs.shared.privateKey,
+            const _d = (_b = req.query) !== null && _b !== void 0 ? _b : {}, { signature, proxyEncoded } = _d, verifiable = tslib_1.__rest(_d, ["signature", "proxyEncoded"]);
+            const { shop: _shop, host, timestamp, path_prefix } = verifiable;
+            const shop = _shop || shopHeader;
+            yield (0, nextjs_cors_1.default)(req, res, {
+                methods: ['PUT', 'PATCH', 'POST', 'DELETE'],
+                origin: (origin, callback) => {
+                    const isSafelisted = (0, shared_1.matchHostname)(origin, [
+                        ...ORIGIN_SAFELIST,
+                        'cdn.shopify.com' // NOTE: this is the domain for checkout UI extensions
+                    ]);
+                    if (isSafelisted) {
+                        return callback(null, true);
+                    }
+                    return callback(new Error('Invalid CORS origin'));
+                },
+                optionsSuccessStatus: 200, // some legacy browsers (IE11, various SmartTVs) choke on 204
             });
-            if (!verificationKeys) {
-                return res.status(412).json({ message: 'Invalid or missing verification' });
-            }
-            const verificationPayload = (0, shared_1.objectToSortedString)(Object.assign({ method: (0, shared_1.getRequestMethod)(rawBody, req.method), timestamp: customAuthTimestamp, body: parsedBody }, (0, shared_1.normalizeURIParts)(targetPath)));
-            const isValid = yield shared_1.subtle.verifyHMAC(verificationPayload, verificationKeys.derivedHMACKey, authSignature);
-            if (!isValid) {
-                return res.status(412).json({ message: 'Invalid or missing verification' });
+            const { target: targetParam } = params !== null && params !== void 0 ? params : {};
+            // eslint-disable-next-line max-len
+            const _targetUrl = ((0, shared_1.stringEmpty)(targetParam) || targetParam.startsWith('http')) ? targetParam : `${APP_BASE_URL}/${(0, shared_1.removeLeadingSlash)(targetParam)}`;
+            const { origin: target, hostname, pathname, search } = (0, shared_1.stringNotEmpty)(_targetUrl) ? new URL(_targetUrl) : {};
+            targetPath = [pathname, search].filter(shared_1.stringNotEmpty).join('');
+            const safelistedTarget = (0, shared_1.matchHostname)(hostname, Object.assign({ [new URL(APP_BASE_URL).hostname]: {
+                    // HMMM: can we generate our own session token (or use the current one) so as to not have to tell handleGraph/Rest to behave as offline?
+                    // headers: {
+                    //   Authorization: 'Bearer {{setting.zendesk.token}}',
+                    // },
+                    params: {
+                        shop,
+                        host,
+                    },
+                } }, TARGET_SAFELIST));
+            if ((0, shared_1.stringEmpty)(targetPath) || (safelistedTarget == undefined)) {
+                return res.status(407).json({ message: 'Unproxyable target' });
             }
-            if (rawBody) {
-                const decryptedMessage = yield shared_1.subtle.decryptMessage(parsedBody, verificationKeys.derivedSecretKey);
-                decryptedBody = JSON.parse(decryptedMessage !== null && decryptedMessage !== void 0 ? decryptedMessage : '{}');
+            if (!shop || !host || !extensionPoint || !signature || !proxyEncoded) {
+                return res.status(400).json({ message: 'Invalid or missing headers', extensionPoint });
             }
-        }
-        const _prepareHeaders = (0, utils_1.prepareHeaders)(serverRuntimeConfig);
-        const headers = yield _prepareHeaders({
-            generateReplacements,
-            shop,
-            appId,
-            headers: Object.assign(Object.assign({}, _headers), targetHeaders),
-        });
-        const proxy = http_proxy_1.default.createProxy();
-        return new Promise((resolve, reject) => {
-            req.url = targetPath;
-            if (headers) {
-                req.headers = headers;
+            const isShopifyOriginOrRelative = (0, shared_1.stringNotEmpty)((0, shared_1.ensureString)(path_prefix).startsWith('http')
+                ? (0, shared_1.sanitizeShop)(new URL(path_prefix).hostname)
+                : path_prefix);
+            // TODO: once Shopify fixes CORS issue when origin is cdn.shopify.com, update this!
+            if (!verifyAppProxySignature(signature, verifiable, isShopifyOriginOrRelative ? APP_CONFIG.apiSecretKey : timestamp)) {
+                return res.status(403).json({ message: 'Invalid signature' });
             }
-            proxy.on('proxyReq', (proxyReq, proxyReqRequest, proxyReqResponse, options) => {
-                if ((0, shared_1.objectNotEmpty)(decryptedBody)) {
-                    const bodyData = JSON.stringify(decryptedBody);
-                    proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));
-                    proxyReq.write(bodyData);
+            // TODO: clean up targetParam.startsWith??
+            if (!targetParam.startsWith(API_PATHS[shared_1.API_ROUTE_NAMES.SESSION_TOKEN])) {
+                const _getVerifiedSessionData = (0, utils_1.getVerifiedSessionData)(serverRuntimeConfig);
+                if (!_getVerifiedSessionData(sessionToken, { shop, host }).catch((_error) => {
+                    if (_error instanceof shared_1.ShopifySessionInvalidError) {
+                        return res.status(403).json({ message: _error.message });
+                    }
+                    throw _error;
+                })) {
+                    return res.status(403).json({ message: 'Unverified signature' });
                 }
+            }
+            const { headers: targetHeaders, params: targetParams } = (0, shared_1.ensureObject)(safelistedTarget);
+            if ((0, shared_1.objectNotEmpty)(targetParams)) {
+                targetPath = (0, shared_1.appendQuery)(targetPath, new URLSearchParams(targetParams).toString());
+            }
+            const [requestBody, processResponse] = yield _getVerifiedBody(req, res, targetPath);
+            console.log(`>>> > handleProxy > requestBody, processResponse:`, requestBody, processResponse);
+            const _prepareHeaders = (0, utils_1.prepareHeaders)(serverRuntimeConfig);
+            const headers = yield _prepareHeaders({
+                generateReplacements,
+                shop,
+                appId,
+                headers: Object.assign(Object.assign({}, _headers), targetHeaders),
             });
-            proxy.on('proxyRes', function (proxyRes, proxyResRequest, proxyResResponse) {
-                (0, node_http_proxy_json_1.default)(proxyResResponse, proxyRes, function (proxyResBody) {
-                    if (!proxyResBody || !isVerifiable || !verificationKeys) {
-                        return proxyResBody;
+            const proxy = http_proxy_1.default.createProxy();
+            return new Promise((resolve, reject) => {
+                req.url = targetPath;
+                if (headers) {
+                    req.headers = headers;
+                }
+                proxy.on('proxyReq', (proxyReq, proxyReqRequest, proxyReqResponse, options) => {
+                    if ((0, shared_1.objectNotEmpty)(requestBody)) {
+                        const bodyData = JSON.stringify(requestBody);
+                        proxyReq.setHeader('Content-Length', Buffer.byteLength(bodyData));
+                        proxyReq.write(bodyData);
                     }
-                    return shared_1.subtle.encryptMessage(JSON.stringify(proxyResBody), verificationKeys.derivedSecretKey);
+                });
+                proxy.on('proxyRes', function (proxyRes, proxyResRequest, proxyResResponse) {
+                    (0, node_http_proxy_json_1.default)(proxyResResponse, proxyRes, function (proxyResBody) {
+                        return processResponse(proxyResBody);
+                    });
+                });
+                proxy.once('error', (error) => {
+                    console.error('Proxy error', error);
+                    reject(error);
+                });
+                proxy.web(req, res, {
+                    target,
+                    timeout: PROXY_TIMEOUT,
+                    proxyTimeout: PROXY_TIMEOUT,
+                    followRedirects: false,
+                    changeOrigin: true,
+                    secure: true,
                 });
             });
-            proxy.once('error', (error) => {
-                console.error('Proxy error', error);
-                reject(error);
-            });
-            proxy.web(req, res, {
-                target,
-                timeout: PROXY_TIMEOUT,
-                proxyTimeout: PROXY_TIMEOUT,
-                followRedirects: false,
-                changeOrigin: true,
-                secure: true,
-            });
-        });
-    }
-    catch (error) {
-        console.error(`Error handling proxy request for '${targetPath}'`, error);
-        return res.status(200).json({ message: (error === null || error === void 0 ? void 0 : error.message) || 'Error handling proxy request', targetPath });
-    }
-});
+        }
+        catch (error) {
+            console.error(`Error handling proxy request for '${targetPath}'`, error);
+            return res.status(200).json({ message: (error === null || error === void 0 ? void 0 : error.message) || 'Error handling proxy request', targetPath });
+        }
+    });
+};
 exports.handleProxy = handleProxy;
 //# sourceMappingURL=proxy.js.map

package/dist/lib/handlers/api/proxy.js.map

@@ -1 +1 @@
-{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":";;;;AAAA,sDAAsD;AACtD,sEAAkC;AAClC,oEAAkC;AAClC,gEAAiC;AACjC,wFAAkD;AAElD,uCAKoB;AACpB,4CAgBwB;AAExB,MAAM,aAAa,GAAG,IAAI,CAAA,CAAC,kBAAkB;AAE7C,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;IACpE,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,IAAA,6BAAoB,EAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;IAEvE,OAAO,IAAA,qBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,CAAA;AACvC,CAAC,CAAA;AAEM,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;;IACrF,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;IAC7C,MAAM,EACJ,QAAQ,EACR,SAAS,EACT,UAAU,EACV,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,GAAG,mBAAmB,CAAA;IACvB,MAAM,KAWF,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,EAXf,EACJ,MAAM,EACN,cAAc,EAAE,MAAM,EACtB,iBAAiB,EAAE,kBAAkB,EACrC,2BAA2B,EAAE,mBAAmB,EAChD,iBAAiB,EAAE,UAAU,EAC7B,iBAAiB,EAAE,WAAW,EAC9B,mBAAmB,EAAE,aAAa,EAClC,kBAAkB,EAAE,WAAW,EAC/B,gBAAgB,EAAE,WAAW,OAEV,EADhB,QAAQ,sBAVP,2KAWL,CAAoB,CAAA;IAErB,MAAM,EACJ,qBAAqB,EAAE,YAAY,EACnC,mBAAmB,EAAE,cAAc,EACnC,eAAe,EAAE,gBAAgB,EACjC,uBAAuB,EAAE,uBAAuB,EAChD,gBAAgB,EAAE,UAAU,GAAG,uBAAuB,aAAvB,uBAAuB,cAAvB,uBAAuB,GAAI,gBAAgB,EAC1E,kBAAkB,EAAE,YAAY,EAChC,UAAU,EAAE,KAAK,GAAG,YAAY;IAChC,6DAA6D;IAC7D,8GAA8G;IAC9G,mCAAmC;MACpC,GAAG,QAAQ,CAAA;IAEZ,IAAI,UAAU,CAAA;IACd,IAAI;QACF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;QACzE,MAAM,YAAY,GAAG,CACnB,MAAM;YACN,kBAAkB;aAClB,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAA;YAChB,mBAAmB;YACnB,aAAa;YACb,CAAC,YAAY,KAAK,aAAa,CAAC,CACjC,CAAA;QAED,IAAI,gBAAgB,CAAA;QACpB,6DAA6D;QAC7D,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAA;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;QACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA,CAAC,yDAAyD;QACxG,IAAI,aAAa,GAAG,UAAU,CAAA;QAE9B,yDAAyD;QACzD,IAAI,IAAA,oBAAW,EAAC,MAAM,CAAC,EAAE;YACvB,GAAG,CAAC,OAAO,mCACN,GAAG,CAAC,OAAO,KACd,MAAM,EAAE,WAAW,IAAI,WAAW,GACnC,CAAA;SACF;QAED,MAAM,KAA6C,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,EAA5D,EAAE,SAAS,EAAE,YAAY,OAAmC,EAA9B,UAAU,sBAAxC,6BAA0C,CAAkB,CAAA;QAClE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,UAAU,CAAA;QAChE,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAA;QAEhC,MAAM,IAAA,qBAAQ,EAAC,GAAG,EAAE,GAAG,EAAE;YACvB,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;YAC3C,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;gBAC3B,MAAM,YAAY,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE;oBACzC,GAAG,eAAe;oBAClB,iBAAiB,CAAC,sDAAsD;iBACzE,CAAC,CAAA;gBAEF,IAAI,YAAY,EAAE;oBAChB,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;iBAC5B;gBAED,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA;YACnD,CAAC;YACD,oBAAoB,EAAE,GAAG,EAAE,6DAA6D;SACzF,CAAC,CAAA;QAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;QAC5C,mCAAmC;QACnC,MAAM,UAAU,GAAG,CAAC,IAAA,oBAAW,EAAC,WAAW,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAA,2BAAkB,EAAC,WAAW,CAAC,EAAE,CAAA;QACpJ,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAA,uBAAc,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;QAC5G,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,uBAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;QAE/D,MAAM,gBAAgB,GAAG,IAAA,sBAAa,EAAC,QAAQ,kBAC7C,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,EAAE;gBAChC,wIAAwI;gBACxI,aAAa;gBACb,uDAAuD;gBACvD,KAAK;gBACL,MAAM,EAAE;oBACN,IAAI;oBACJ,IAAI;iBACL;aACF,IACE,eAAe,EAClB,CAAA;QAEF,IAAI,IAAA,oBAAW,EAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,EAAE;YAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAA;SAC/D;QAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE;YACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,cAAc,EAAE,CAAC,CAAA;SACvF;QAED,MAAM,yBAAyB,GAAG,IAAA,uBAAc,EAC9C,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;YAC1C,CAAC,CAAC,IAAA,qBAAY,EAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;YAC7C,CAAC,CAAC,WAAW,CAChB,CAAA;QAED,mFAAmF;QACnF,IACE,CAAC,uBAAuB,CACtB,SAAS,EACT,UAAU,EACV,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAChE,EACD;YACA,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAA;SAC9D;QAED,0CAA0C;QAC1C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,wBAAe,CAAC,aAAa,CAAC,CAAC,EAAE;YACrE,MAAM,uBAAuB,GAAG,IAAA,8BAAsB,EAAC,mBAAmB,CAAC,CAAA;YAC3E,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;gBAC1E,IAAI,MAAM,YAAY,mCAA0B,EAAE;oBAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;iBACzD;gBACD,MAAM,MAAM,CAAA;YACd,CAAC,CAAC,EAAE;gBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAA;aACjE;SACF;QAED,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,qBAAY,EAAC,gBAAgB,CAAC,CAAA;QACvF,IAAI,IAAA,uBAAc,EAAC,YAAY,CAAC,EAAE;YAChC,UAAU,GAAG,IAAA,oBAAW,EAAC,UAAU,EAAE,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;SACnF;QAED,kEAAkE;QAClE,IAAI,YAAY,EAAE;YAChB,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAA,IAAI,CAAC,mBAAmB,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,EAAE;gBACrI,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAA;aAC7E;YAED,gBAAgB,GAAG,MAAM,eAAM,CAAC,mBAAmB,CAAC;gBAClD,SAAS,EAAE,kBAAkB;gBAC7B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;aACvC,CAAC,CAAA;YAEF,IAAI,CAAC,gBAAgB,EAAE;gBACrB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;aAC5E;YAED,MAAM,mBAAmB,GAAG,IAAA,6BAAoB,kBAC9C,MAAM,EAAE,IAAA,yBAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7C,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,UAAU,IACb,IAAA,0BAAiB,EAAC,UAAU,CAAC,EAChC,CAAA;YAEF,MAAM,OAAO,GAAG,MAAM,eAAM,CAAC,UAAU,CACrC,mBAAmB,EACnB,gBAAgB,CAAC,cAAc,EAC/B,aAAa,CACd,CAAA;YAED,IAAI,CAAC,OAAO,EAAE;gBACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;aAC5E;YAED,IAAI,OAAO,EAAE;gBACX,MAAM,gBAAgB,GAAG,MAAM,eAAM,CAAC,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;gBACnG,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,IAAI,CAAC,CAAA;aACrD;SACF;QAED,MAAM,eAAe,GAAG,IAAA,sBAAc,EAAC,mBAAmB,CAAC,CAAA;QAC3D,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;YACpC,oBAAoB;YACpB,IAAI;YACJ,KAAK;YACL,OAAO,kCACF,QAAQ,GACR,aAAa,CACjB;SACF,CAAC,CAAA;QAEF,MAAM,KAAK,GAAG,oBAAS,CAAC,WAAW,EAAE,CAAA;QAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;YACrC,GAAG,CAAC,GAAG,GAAG,UAAU,CAAA;YACpB,IAAI,OAAO,EAAE;gBACX,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;aACtB;YAED,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE;gBAC5E,IAAI,IAAA,uBAAc,EAAC,aAAa,CAAC,EAAE;oBACjC,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,aAAa,CAAC,CAAA;oBAC9C,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;oBACjE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;iBACzB;YACH,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,QAAQ,EAAE,eAAe,EAAE,gBAAgB;gBACxE,IAAA,8BAAe,EAAC,gBAAgB,EAAE,QAAQ,EAAE,UAAU,YAAY;oBAChE,IAAI,CAAC,YAAY,IAAI,CAAC,YAAY,IAAI,CAAC,gBAAgB,EAAE;wBACvD,OAAO,YAAY,CAAA;qBACpB;oBAED,OAAO,eAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;gBAC/F,CAAC,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;gBAC5B,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;gBACnC,MAAM,CAAC,KAAK,CAAC,CAAA;YACf,CAAC,CAAC,CAAA;YAEF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;gBAClB,MAAM;gBACN,OAAO,EAAE,aAAa;gBACtB,YAAY,EAAE,aAAa;gBAC3B,eAAe,EAAE,KAAK;gBACtB,YAAY,EAAE,IAAI;gBAClB,MAAM,EAAE,IAAI;aACb,CAAC,CAAA;QACJ,CAAC,CAAC,CAAA;KACH;IAAC,OAAO,KAAK,EAAE;QACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,UAAU,GAAG,EAAE,KAAK,CAAC,CAAA;QACxE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,KAAI,8BAA8B,EAAE,UAAU,EAAE,CAAC,CAAA;KACvG;AACH,CAAC,CAAA,CAAA;AAhPY,QAAA,WAAW,eAgPvB"}
+{"version":3,"file":"proxy.js","sourceRoot":"","sources":["../../../../src/lib/handlers/api/proxy.js"],"names":[],"mappings":";;;;AAAA,sDAAsD;AACtD,sEAAkC;AAClC,oEAAkC;AAClC,wFAAkD;AAElD,uCAMoB;AACpB,4CAawB;AAExB,MAAM,aAAa,GAAG,IAAI,CAAA,CAAC,kBAAkB;AAE7C,MAAM,uBAAuB,GAAG,CAAC,SAAS,EAAE,UAAU,EAAE,UAAU,EAAE,EAAE;IACpE,MAAM,IAAI,GAAG,IAAA,oBAAY,EAAC,IAAA,6BAAoB,EAAC,UAAU,CAAC,EAAE,UAAU,CAAC,CAAA;IAEvE,OAAO,IAAA,qBAAa,EAAC,SAAS,EAAE,IAAI,CAAC,CAAA;AACvC,CAAC,CAAA;AAEM,MAAM,WAAW,GAAG,CAAC,mBAAmB,EAAE,MAAM,EAAE,EAAE;IACzD,MAAM,EAAE,oBAAoB,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;IAC7C,MAAM,EACJ,SAAS,EACT,UAAU,EACV,YAAY,EACZ,eAAe,EACf,eAAe,GAChB,GAAG,mBAAmB,CAAA;IACvB,MAAM,gBAAgB,GAAG,IAAA,uBAAe,EAAC,mBAAmB,CAAC,CAAA;IAE7D,OAAO,CAAO,GAAG,EAAE,GAAG,EAAE,MAAM,EAAE,EAAE;;QAChC,MAAM,KAWF,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,EAXf,EACJ,MAAM;QACN,0BAA0B;QAC1B,yCAAyC;QACzC,oDAAoD;QACpD,iCAAiC;QACjC,iBAAiB,EAAE,WAAW,EAC9B,mBAAmB,EAAE,aAAa,EAClC,kBAAkB,EAAE,WAAW,EAC/B,gBAAgB,EAAE,WAAW,OAEV,EADhB,QAAQ,sBAVP,wFAWL,CAAoB,CAAA;QAErB,MAAM,EACJ,qBAAqB,EAAE,YAAY,EACnC,mBAAmB,EAAE,cAAc,EACnC,eAAe,EAAE,gBAAgB,EACjC,uBAAuB,EAAE,uBAAuB,EAChD,gBAAgB,EAAE,UAAU,GAAG,uBAAuB,aAAvB,uBAAuB,cAAvB,uBAAuB,GAAI,gBAAgB,EAC1E,kBAAkB,EAAE,YAAY,EAChC,UAAU,EAAE,KAAK,GAAG,YAAY;QAChC,6DAA6D;QAC7D,8GAA8G;QAC9G,mCAAmC;UACpC,GAAG,QAAQ,CAAA;QAEZ,IAAI,UAAU,CAAA;QACd,IAAI;YAEF,yDAAyD;YACzD,IAAI,IAAA,oBAAW,EAAC,MAAM,CAAC,EAAE;gBACvB,GAAG,CAAC,OAAO,mCACN,GAAG,CAAC,OAAO,KACd,MAAM,EAAE,WAAW,IAAI,WAAW,GACnC,CAAA;aACF;YAED,MAAM,KAA6C,MAAA,GAAG,CAAC,KAAK,mCAAI,EAAE,EAA5D,EAAE,SAAS,EAAE,YAAY,OAAmC,EAA9B,UAAU,sBAAxC,6BAA0C,CAAkB,CAAA;YAClE,MAAM,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,SAAS,EAAE,WAAW,EAAE,GAAG,UAAU,CAAA;YAChE,MAAM,IAAI,GAAG,KAAK,IAAI,UAAU,CAAA;YAEhC,MAAM,IAAA,qBAAQ,EAAC,GAAG,EAAE,GAAG,EAAE;gBACvB,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,CAAC;gBAC3C,MAAM,EAAE,CAAC,MAAM,EAAE,QAAQ,EAAE,EAAE;oBAC3B,MAAM,YAAY,GAAG,IAAA,sBAAa,EAAC,MAAM,EAAE;wBACzC,GAAG,eAAe;wBAClB,iBAAiB,CAAC,sDAAsD;qBACzE,CAAC,CAAA;oBAEF,IAAI,YAAY,EAAE;wBAChB,OAAO,QAAQ,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;qBAC5B;oBAED,OAAO,QAAQ,CAAC,IAAI,KAAK,CAAC,qBAAqB,CAAC,CAAC,CAAA;gBACnD,CAAC;gBACD,oBAAoB,EAAE,GAAG,EAAE,6DAA6D;aACzF,CAAC,CAAA;YAEF,MAAM,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,MAAM,aAAN,MAAM,cAAN,MAAM,GAAI,EAAE,CAAA;YAC5C,mCAAmC;YACnC,MAAM,UAAU,GAAG,CAAC,IAAA,oBAAW,EAAC,WAAW,CAAC,IAAI,WAAW,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,GAAG,YAAY,IAAI,IAAA,2BAAkB,EAAC,WAAW,CAAC,EAAE,CAAA;YACpJ,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,IAAA,uBAAc,EAAC,UAAU,CAAC,CAAC,CAAC,CAAC,IAAI,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,EAAE,CAAA;YAC5G,UAAU,GAAG,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,MAAM,CAAC,uBAAc,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAA;YAE/D,MAAM,gBAAgB,GAAG,IAAA,sBAAa,EAAC,QAAQ,kBAC7C,CAAC,IAAI,GAAG,CAAC,YAAY,CAAC,CAAC,QAAQ,CAAC,EAAE;oBAChC,wIAAwI;oBACxI,aAAa;oBACb,uDAAuD;oBACvD,KAAK;oBACL,MAAM,EAAE;wBACN,IAAI;wBACJ,IAAI;qBACL;iBACF,IACE,eAAe,EAClB,CAAA;YAEF,IAAI,IAAA,oBAAW,EAAC,UAAU,CAAC,IAAI,CAAC,gBAAgB,IAAI,SAAS,CAAC,EAAE;gBAC9D,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC,CAAA;aAC/D;YAED,IAAI,CAAC,IAAI,IAAI,CAAC,IAAI,IAAI,CAAC,cAAc,IAAI,CAAC,SAAS,IAAI,CAAC,YAAY,EAAE;gBACpE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,4BAA4B,EAAE,cAAc,EAAE,CAAC,CAAA;aACvF;YAED,MAAM,yBAAyB,GAAG,IAAA,uBAAc,EAC9C,IAAA,qBAAY,EAAC,WAAW,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC;gBAC1C,CAAC,CAAC,IAAA,qBAAY,EAAC,IAAI,GAAG,CAAC,WAAW,CAAC,CAAC,QAAQ,CAAC;gBAC7C,CAAC,CAAC,WAAW,CAChB,CAAA;YAED,mFAAmF;YACnF,IACE,CAAC,uBAAuB,CACtB,SAAS,EACT,UAAU,EACV,yBAAyB,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC,CAAC,SAAS,CAChE,EACD;gBACA,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,mBAAmB,EAAE,CAAC,CAAA;aAC9D;YAED,0CAA0C;YAC1C,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,SAAS,CAAC,wBAAe,CAAC,aAAa,CAAC,CAAC,EAAE;gBACrE,MAAM,uBAAuB,GAAG,IAAA,8BAAsB,EAAC,mBAAmB,CAAC,CAAA;gBAC3E,IAAI,CAAC,uBAAuB,CAAC,YAAY,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,EAAE;oBAC1E,IAAI,MAAM,YAAY,mCAA0B,EAAE;wBAChD,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC,CAAA;qBACzD;oBACD,MAAM,MAAM,CAAA;gBACd,CAAC,CAAC,EAAE;oBACF,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,sBAAsB,EAAE,CAAC,CAAA;iBACjE;aACF;YAED,MAAM,EAAE,OAAO,EAAE,aAAa,EAAE,MAAM,EAAE,YAAY,EAAE,GAAG,IAAA,qBAAY,EAAC,gBAAgB,CAAC,CAAA;YACvF,IAAI,IAAA,uBAAc,EAAC,YAAY,CAAC,EAAE;gBAChC,UAAU,GAAG,IAAA,oBAAW,EAAC,UAAU,EAAE,IAAI,eAAe,CAAC,YAAY,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAA;aACnF;YAED,MAAM,CAAC,WAAW,EAAE,eAAe,CAAC,GAAG,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,UAAU,CAAC,CAAA;YACnF,OAAO,CAAC,GAAG,CAAC,mDAAmD,EAAE,WAAW,EAAE,eAAe,CAAC,CAAA;YAE9F,MAAM,eAAe,GAAG,IAAA,sBAAc,EAAC,mBAAmB,CAAC,CAAA;YAC3D,MAAM,OAAO,GAAG,MAAM,eAAe,CAAC;gBACpC,oBAAoB;gBACpB,IAAI;gBACJ,KAAK;gBACL,OAAO,kCACF,QAAQ,GACR,aAAa,CACjB;aACF,CAAC,CAAA;YAEF,MAAM,KAAK,GAAG,oBAAS,CAAC,WAAW,EAAE,CAAA;YAErC,OAAO,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;gBACrC,GAAG,CAAC,GAAG,GAAG,UAAU,CAAA;gBACpB,IAAI,OAAO,EAAE;oBACX,GAAG,CAAC,OAAO,GAAG,OAAO,CAAA;iBACtB;gBAED,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,CAAC,QAAQ,EAAE,eAAe,EAAE,gBAAgB,EAAE,OAAO,EAAE,EAAE;oBAC5E,IAAI,IAAA,uBAAc,EAAC,WAAW,CAAC,EAAE;wBAC/B,MAAM,QAAQ,GAAG,IAAI,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;wBAC5C,QAAQ,CAAC,SAAS,CAAC,gBAAgB,EAAE,MAAM,CAAC,UAAU,CAAC,QAAQ,CAAC,CAAC,CAAA;wBACjE,QAAQ,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;qBACzB;gBACH,CAAC,CAAC,CAAA;gBAEF,KAAK,CAAC,EAAE,CAAC,UAAU,EAAE,UAAU,QAAQ,EAAE,eAAe,EAAE,gBAAgB;oBACxE,IAAA,8BAAe,EAAC,gBAAgB,EAAE,QAAQ,EAAE,UAAU,YAAY;wBAChE,OAAO,eAAe,CAAC,YAAY,CAAC,CAAA;oBACtC,CAAC,CAAC,CAAA;gBACJ,CAAC,CAAC,CAAA;gBAEF,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;oBAC5B,OAAO,CAAC,KAAK,CAAC,aAAa,EAAE,KAAK,CAAC,CAAA;oBACnC,MAAM,CAAC,KAAK,CAAC,CAAA;gBACf,CAAC,CAAC,CAAA;gBAEF,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE;oBAClB,MAAM;oBACN,OAAO,EAAE,aAAa;oBACtB,YAAY,EAAE,aAAa;oBAC3B,eAAe,EAAE,KAAK;oBACtB,YAAY,EAAE,IAAI;oBAClB,MAAM,EAAE,IAAI;iBACb,CAAC,CAAA;YACJ,CAAC,CAAC,CAAA;SACH;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,qCAAqC,UAAU,GAAG,EAAE,KAAK,CAAC,CAAA;YACxE,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,KAAI,8BAA8B,EAAE,UAAU,EAAE,CAAC,CAAA;SACvG;IACH,CAAC,CAAA,CAAA;AACH,CAAC,CAAA;AA5LY,QAAA,WAAW,eA4LvB"}

package/dist/lib/utils/index.d.ts

@@ -6,4 +6,5 @@ export * from "./session";
 export * from "./shopify";
 export * from "./shopify-api-js/oauth";
 export * from "./token";
+export * from "./verification";
 //# sourceMappingURL=index.d.ts.map

package/dist/lib/utils/index.js

@@ -9,4 +9,5 @@ tslib_1.__exportStar(require("./session"), exports);
 tslib_1.__exportStar(require("./shopify"), exports);
 tslib_1.__exportStar(require("./shopify-api-js/oauth"), exports);
 tslib_1.__exportStar(require("./token"), exports);
+tslib_1.__exportStar(require("./verification"), exports);
 //# sourceMappingURL=index.js.map

package/dist/lib/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.js"],"names":[],"mappings":";;;AAAA,oDAAyB;AACzB,mDAAwB;AACxB,qDAA0B;AAC1B,oDAAyB;AACzB,oDAAyB;AACzB,oDAAyB;AACzB,iEAAsC;AACtC,kDAAuB"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/lib/utils/index.js"],"names":[],"mappings":";;;AAAA,oDAAyB;AACzB,mDAAwB;AACxB,qDAA0B;AAC1B,oDAAyB;AACzB,oDAAyB;AACzB,oDAAyB;AACzB,iEAAsC;AACtC,kDAAuB;AACvB,yDAA8B"}

package/dist/lib/utils/verification.d.ts

@@ -0,0 +1,2 @@
+export function getVerifiedBody(serverRuntimeConfig: any): (req: any, res: any, uri: any) => Promise<any>;
+//# sourceMappingURL=verification.d.ts.map

package/dist/lib/utils/verification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.d.ts","sourceRoot":"","sources":["../../../src/lib/utils/verification.js"],"names":[],"mappings":"AAUO,0GAmFN"}

package/dist/lib/utils/verification.js

@@ -0,0 +1,63 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getVerifiedBody = void 0;
+const tslib_1 = require("tslib");
+const raw_body_1 = tslib_1.__importDefault(require("raw-body"));
+const shared_1 = require("../../../shared");
+const getVerifiedBody = (serverRuntimeConfig) => {
+    const { keyPairs } = serverRuntimeConfig;
+    return (req, res, uri) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+        var _a;
+        const { 'x-public-key': apiKey, 'x-ephemeral-key': ephemeralPublicKey, 'x-authorization-timestamp': customAuthTimestamp, 'x-authorization': customAuth, } = (_a = req.headers) !== null && _a !== void 0 ? _a : {};
+        try {
+            const [authProtocol, authSignature] = (0, shared_1.ensureString)(customAuth).split(' ');
+            const isVerifiable = (apiKey &&
+                ephemeralPublicKey &&
+                (keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) &&
+                customAuthTimestamp &&
+                authSignature &&
+                (authProtocol === 'HMAC-SHA256'));
+            let verificationKeys;
+            // NOTE raw request body is required for shopify's validation
+            const _rawBody = yield (0, raw_body_1.default)(req);
+            const rawBody = _rawBody.toString();
+            const parsedBody = JSON.parse(rawBody || '{}'); // NOTE: parsedBody should be encrypted when isVerifiable
+            let decryptedBody = parsedBody;
+            // TEMP!!! remove isVerifiable check once webwidget moved to react
+            if (isVerifiable) {
+                if (!apiKey || !ephemeralPublicKey || !(keyPairs === null || keyPairs === void 0 ? void 0 : keyPairs.shared) || !customAuthTimestamp || !authSignature || (authProtocol !== 'HMAC-SHA256')) {
+                    return res.status(401).json({ message: 'Invalid or missing authorization' });
+                }
+                verificationKeys = yield shared_1.subtle.getVerificationKeys({
+                    publicKey: ephemeralPublicKey,
+                    privateKey: keyPairs.shared.privateKey,
+                });
+                if (!verificationKeys) {
+                    return res.status(412).json({ message: 'Invalid or missing verification' });
+                }
+                const verificationPayload = (0, shared_1.objectToSortedString)(Object.assign({ method: (0, shared_1.getRequestMethod)(rawBody, req.method), timestamp: customAuthTimestamp, body: parsedBody }, (0, shared_1.normalizeURIParts)(uri)));
+                const isValid = yield shared_1.subtle.verifyHMAC(verificationPayload, verificationKeys.derivedHMACKey, authSignature);
+                if (!isValid) {
+                    return res.status(412).json({ message: 'Invalid or missing verification' });
+                }
+                if (rawBody) {
+                    const decryptedMessage = yield shared_1.subtle.decryptMessage(parsedBody, verificationKeys.derivedSecretKey);
+                    decryptedBody = JSON.parse(decryptedMessage !== null && decryptedMessage !== void 0 ? decryptedMessage : '{}');
+                }
+            }
+            const postProcess = (response) => tslib_1.__awaiter(void 0, void 0, void 0, function* () {
+                if (!response || !isVerifiable || !(verificationKeys === null || verificationKeys === void 0 ? void 0 : verificationKeys.derivedSecretKey)) {
+                    return response;
+                }
+                return shared_1.subtle.encryptMessage(JSON.stringify(response), verificationKeys === null || verificationKeys === void 0 ? void 0 : verificationKeys.derivedSecretKey);
+            });
+            return [decryptedBody, postProcess];
+        }
+        catch (error) {
+            console.error(`Error handling request verification for '${req.url}'`, error);
+            return res.status(200).json({ message: (error === null || error === void 0 ? void 0 : error.message) || 'Error handling request verification', targetPath: req.url });
+        }
+    });
+};
+exports.getVerifiedBody = getVerifiedBody;
+//# sourceMappingURL=verification.js.map

package/dist/lib/utils/verification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"verification.js","sourceRoot":"","sources":["../../../src/lib/utils/verification.js"],"names":[],"mappings":";;;;AAAA,gEAAiC;AAEjC,4CAMwB;AAEjB,MAAM,eAAe,GAAG,CAAC,mBAAmB,EAAE,EAAE;IACrD,MAAM,EAAE,QAAQ,EAAE,GAAG,mBAAmB,CAAA;IAExC,OAAO,CAAO,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;;QAC7B,MAAM,EACJ,cAAc,EAAE,MAAM,EACtB,iBAAiB,EAAE,kBAAkB,EACrC,2BAA2B,EAAE,mBAAmB,EAChD,iBAAiB,EAAE,UAAU,GAC9B,GAAG,MAAA,GAAG,CAAC,OAAO,mCAAI,EAAE,CAAA;QAErB,IAAI;YACF,MAAM,CAAC,YAAY,EAAE,aAAa,CAAC,GAAG,IAAA,qBAAY,EAAC,UAAU,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;YACzE,MAAM,YAAY,GAAG,CACnB,MAAM;gBACN,kBAAkB;iBAClB,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAA;gBAChB,mBAAmB;gBACnB,aAAa;gBACb,CAAC,YAAY,KAAK,aAAa,CAAC,CACjC,CAAA;YAED,IAAI,gBAAgB,CAAA;YACpB,6DAA6D;YAC7D,MAAM,QAAQ,GAAG,MAAM,IAAA,kBAAU,EAAC,GAAG,CAAC,CAAA;YACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,QAAQ,EAAE,CAAA;YACnC,MAAM,UAAU,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,IAAI,IAAI,CAAC,CAAA,CAAC,yDAAyD;YACxG,IAAI,aAAa,GAAG,UAAU,CAAA;YAG9B,kEAAkE;YAClE,IAAI,YAAY,EAAE;gBAChB,IAAI,CAAC,MAAM,IAAI,CAAC,kBAAkB,IAAI,CAAC,CAAA,QAAQ,aAAR,QAAQ,uBAAR,QAAQ,CAAE,MAAM,CAAA,IAAI,CAAC,mBAAmB,IAAI,CAAC,aAAa,IAAI,CAAC,YAAY,KAAK,aAAa,CAAC,EAAE;oBACrI,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAA;iBAC7E;gBAED,gBAAgB,GAAG,MAAM,eAAM,CAAC,mBAAmB,CAAC;oBAClD,SAAS,EAAE,kBAAkB;oBAC7B,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,UAAU;iBACvC,CAAC,CAAA;gBAEF,IAAI,CAAC,gBAAgB,EAAE;oBACrB,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;iBAC5E;gBAED,MAAM,mBAAmB,GAAG,IAAA,6BAAoB,kBAC9C,MAAM,EAAE,IAAA,yBAAgB,EAAC,OAAO,EAAE,GAAG,CAAC,MAAM,CAAC,EAC7C,SAAS,EAAE,mBAAmB,EAC9B,IAAI,EAAE,UAAU,IACb,IAAA,0BAAiB,EAAC,GAAG,CAAC,EACzB,CAAA;gBAEF,MAAM,OAAO,GAAG,MAAM,eAAM,CAAC,UAAU,CACrC,mBAAmB,EACnB,gBAAgB,CAAC,cAAc,EAC/B,aAAa,CACd,CAAA;gBAED,IAAI,CAAC,OAAO,EAAE;oBACZ,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC,CAAA;iBAC5E;gBAED,IAAI,OAAO,EAAE;oBACX,MAAM,gBAAgB,GAAG,MAAM,eAAM,CAAC,cAAc,CAAC,UAAU,EAAE,gBAAgB,CAAC,gBAAgB,CAAC,CAAA;oBACnG,aAAa,GAAG,IAAI,CAAC,KAAK,CAAC,gBAAgB,aAAhB,gBAAgB,cAAhB,gBAAgB,GAAI,IAAI,CAAC,CAAA;iBACrD;aACF;YAED,MAAM,WAAW,GAAG,CAAO,QAAQ,EAAE,EAAE;gBACrC,IAAI,CAAC,QAAQ,IAAI,CAAC,YAAY,IAAI,CAAC,CAAA,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,gBAAgB,CAAA,EAAE;oBACrE,OAAO,QAAQ,CAAA;iBAChB;gBAED,OAAO,eAAM,CAAC,cAAc,CAAC,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,gBAAgB,aAAhB,gBAAgB,uBAAhB,gBAAgB,CAAE,gBAAgB,CAAC,CAAA;YAC5F,CAAC,CAAA,CAAA;YAED,OAAO,CAAC,aAAa,EAAE,WAAW,CAAC,CAAA;SACpC;QAAC,OAAO,KAAK,EAAE;YACd,OAAO,CAAC,KAAK,CAAC,4CAA4C,GAAG,CAAC,GAAG,GAAG,EAAE,KAAK,CAAC,CAAA;YAC5E,OAAO,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,OAAO,KAAI,qCAAqC,EAAE,UAAU,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,CAAA;SACvH;IAEH,CAAC,CAAA,CAAA;AACH,CAAC,CAAA;AAnFY,QAAA,eAAe,mBAmF3B"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agnostack/next-shopify",
-  "version": "1.13.5-beta.2",
+  "version": "1.13.5-beta.4",
   "author": "agnoStack Dev <developers@agnostack.com> (https://agnostack.com)",
   "owner": "agnoStack",
   "description": "Please contact agnoStack via info@agnostack.com for any questions",