@agnostack/next-shopify 1.3.2-alpha.25 → 1.3.2-alpha.26

package/CHANGELOG.md

@@ -1,3 +1,10 @@
+## [1.3.2-alpha.26](https://github.com/agnostack/next-shopify/compare/v1.3.2-alpha.25...v1.3.2-alpha.26) (2022-11-18)
+
+
+### Bug Fixes
+
+* add ensureSecurityHeader ([667abc1](https://github.com/agnostack/next-shopify/commit/667abc1bef3c39583c57ff41b13c5b86ba7bd722))
+
 ## [1.3.2-alpha.25](https://github.com/agnostack/next-shopify/compare/v1.3.2-alpha.24...v1.3.2-alpha.25) (2022-11-18)
 
 

package/dist/ensureSecurityHeader.d.ts

@@ -0,0 +1,4 @@
+export function ensureSecurityHeader({ res, query }?: {
+    res: any;
+    query: any;
+}): void;

package/dist/ensureSecurityHeader.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ensureSecurityHeader = void 0;
+const ensureSecurityHeader = ({ res, query } = {}) => {
+    const headerValue = (query === null || query === void 0 ? void 0 : query.shop)
+        ? `frame-ancestors self https://admin.shopify.com https://${query === null || query === void 0 ? void 0 : query.shop};`
+        : "frame-ancestors 'none';";
+    res.setHeader('Content-Security-Policy', headerValue);
+};
+exports.ensureSecurityHeader = ensureSecurityHeader;
+//# sourceMappingURL=ensureSecurityHeader.js.map

package/dist/ensureSecurityHeader.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensureSecurityHeader.js","sourceRoot":"","sources":["../src/ensureSecurityHeader.js"],"names":[],"mappings":";;;AAAO,MAAM,oBAAoB,GAAG,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE;IAC1D,MAAM,WAAW,GAAG,CAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI;QAC7B,CAAC,CAAC,0DAA0D,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,GAAG;QAC1E,CAAC,CAAC,yBAAyB,CAAA;IAC7B,GAAG,CAAC,SAAS,CAAC,yBAAyB,EAAE,WAAW,CAAC,CAAA;AACvD,CAAC,CAAA;AALY,QAAA,oBAAoB,wBAKhC"}

package/dist/index.d.ts

@@ -1,4 +1,5 @@
-export * from './apiHelpers';
 export * from './apiHandlers';
+export * from './apiHelpers';
+export * from './ensureSecurityHeader';
 export * from './protectRoute';
 export * from './withShopify';

package/dist/index.js

@@ -10,8 +10,9 @@ var __exportStar = (this && this.__exportStar) || function(m, exports) {
     for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
 };
 Object.defineProperty(exports, "__esModule", { value: true });
-__exportStar(require("./apiHelpers"), exports);
 __exportStar(require("./apiHandlers"), exports);
+__exportStar(require("./apiHelpers"), exports);
+__exportStar(require("./ensureSecurityHeader"), exports);
 __exportStar(require("./protectRoute"), exports);
 __exportStar(require("./withShopify"), exports);
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,+CAA4B;AAC5B,gDAA6B;AAC7B,iDAA8B;AAC9B,gDAA6B"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,gDAA6B;AAC7B,+CAA4B;AAC5B,yDAAsC;AACtC,iDAA8B;AAC9B,gDAA6B"}

package/dist/protectRoute.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.protectRoute = void 0;
+const protectSecurity_1 = require("./protectSecurity");
 const utils_1 = require("./utils");
 const protectRoute = (props) => async ({ req, res, query, locale } = {}, data) => {
     var _a, _b, _c, _d, _e, _f;
@@ -10,6 +11,7 @@ const protectRoute = (props) => async ({ req, res, query, locale } = {}, data) =
     console.log(`>>> ~ protectRoute ~ req.query`, req.query);
     const embedded = (_c = query === null || query === void 0 ? void 0 : query.embedded) !== null && _c !== void 0 ? _c : (_d = req.query) === null || _d === void 0 ? void 0 : _d.embedded;
     console.log(`>>> ~ protectRoute ~ embedded`, embedded);
+    protectSecurity_1.protectSecurity({ res, query });
     if (!shop) {
         const noshopurl = `${PAGE_PATHS[utils_1.PAGE_ROUTE_NAMES.ERROR]}?code=no_shop_provided&type=protectRoute`;
         console.log(`>>> ~ protectRoute ~ noshopurl`, noshopurl);

package/dist/protectRoute.js.map

@@ -1 +1 @@
-{"version":3,"file":"protectRoute.js","sourceRoot":"","sources":["../src/protectRoute.js"],"names":[],"mappings":";;;AAAA,mCAMgB;AAET,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE;;IACtF,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAA;IACvD,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;IAC5B,MAAM,IAAI,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,mCAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,IAAI,CAAA;IAC3C,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,mCAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,QAAQ,CAAA;IACvD,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAA;IAEtD,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,wBAAgB,CAAC,KAAK,CAAC,0CAA0C,CAAA;QACjG,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAA;QACxD,OAAO;YACL,QAAQ,EAAE;gBACR,WAAW,EAAE,SAAS;gBACtB,SAAS,EAAE,KAAK;aACjB;SACF,CAAA;KACF;IAED,MAAM,OAAO,GAAG,6BAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAClD,MAAM,YAAY,GAAG,MAAM,CAAA,MAAA,MAAA,OAAO,CAAC,OAAO,CAAC,eAAe,0CAAE,kBAAkB,mDAAG,IAAI,CAAC,CAAA,CAAA;IACtF,OAAO,CAAC,GAAG,CAAC,0CAA0C,EAAE,mBAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;IAEzF,IAAI,kBAAU,CAAC,YAAY,CAAC,EAAE;QAC5B,MAAM,eAAe,GAAG,sBAAc,CAAC,KAAK,EAAE;YAC5C,GAAG;YACH,GAAG;YACH,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,eAAe,CAAC,CAAA;QAEpE,OAAO;YACL,QAAQ,EAAE;gBACR,WAAW,EAAE,eAAe;gBAC5B,SAAS,EAAE,KAAK;aACjB;SACF,CAAA;KACF;IAED,IAAI,QAAQ,KAAK,GAAG,EAAE;QACpB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC3D,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,cAAc,CAAC,CAAA;QAElE,OAAO;YACL,QAAQ,EAAE;gBACR,WAAW,EAAE,cAAc;gBAC3B,SAAS,EAAE,KAAK;aACjB;SACF,CAAA;KACF;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAE3C,OAAO;QACL,KAAK,kBACH,MAAM,IACH,IAAI,CACR;KACF,CAAA;AACH,CAAC,CAAA;AA5DY,QAAA,YAAY,gBA4DxB"}
+{"version":3,"file":"protectRoute.js","sourceRoot":"","sources":["../src/protectRoute.js"],"names":[],"mappings":";;;AAAA,uDAAmD;AACnD,mCAMgB;AAET,MAAM,YAAY,GAAG,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,EAAE;;IACtF,OAAO,CAAC,GAAG,CAAC,0CAA0C,CAAC,CAAA;IACvD,MAAM,EAAE,UAAU,EAAE,GAAG,KAAK,CAAA;IAC5B,MAAM,IAAI,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,IAAI,mCAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,IAAI,CAAA;IAC3C,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,GAAG,CAAC,KAAK,CAAC,CAAA;IACxD,MAAM,QAAQ,GAAG,MAAA,KAAK,aAAL,KAAK,uBAAL,KAAK,CAAE,QAAQ,mCAAI,MAAA,GAAG,CAAC,KAAK,0CAAE,QAAQ,CAAA;IACvD,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,QAAQ,CAAC,CAAA;IAEtD,iCAAe,CAAC,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC,CAAA;IAE/B,IAAI,CAAC,IAAI,EAAE;QACT,MAAM,SAAS,GAAG,GAAG,UAAU,CAAC,wBAAgB,CAAC,KAAK,CAAC,0CAA0C,CAAA;QACjG,OAAO,CAAC,GAAG,CAAC,gCAAgC,EAAE,SAAS,CAAC,CAAA;QACxD,OAAO;YACL,QAAQ,EAAE;gBACR,WAAW,EAAE,SAAS;gBACtB,SAAS,EAAE,KAAK;aACjB;SACF,CAAA;KACF;IAED,MAAM,OAAO,GAAG,6BAAqB,CAAC,KAAK,EAAE,IAAI,CAAC,CAAA;IAClD,MAAM,YAAY,GAAG,MAAM,CAAA,MAAA,MAAA,OAAO,CAAC,OAAO,CAAC,eAAe,0CAAE,kBAAkB,mDAAG,IAAI,CAAC,CAAA,CAAA;IACtF,OAAO,CAAC,GAAG,CAAC,0CAA0C,EAAE,mBAAW,CAAC,YAAY,CAAC,CAAC,MAAM,CAAC,CAAA;IAEzF,IAAI,kBAAU,CAAC,YAAY,CAAC,EAAE;QAC5B,MAAM,eAAe,GAAG,sBAAc,CAAC,KAAK,EAAE;YAC5C,GAAG;YACH,GAAG;YACH,KAAK;SACN,CAAC,CAAA;QAEF,OAAO,CAAC,GAAG,CAAC,sCAAsC,EAAE,eAAe,CAAC,CAAA;QAEpE,OAAO;YACL,QAAQ,EAAE;gBACR,WAAW,EAAE,eAAe;gBAC5B,SAAS,EAAE,KAAK;aACjB;SACF,CAAA;KACF;IAED,IAAI,QAAQ,KAAK,GAAG,EAAE;QACpB,MAAM,cAAc,GAAG,OAAO,CAAC,KAAK,CAAC,iBAAiB,CAAC,GAAG,CAAC,CAAA;QAC3D,OAAO,CAAC,GAAG,CAAC,qCAAqC,EAAE,cAAc,CAAC,CAAA;QAElE,OAAO;YACL,QAAQ,EAAE;gBACR,WAAW,EAAE,cAAc;gBAC3B,SAAS,EAAE,KAAK;aACjB;SACF,CAAA;KACF;IAED,OAAO,CAAC,GAAG,CAAC,8BAA8B,CAAC,CAAA;IAE3C,OAAO;QACL,KAAK,kBACH,MAAM,IACH,IAAI,CACR;KACF,CAAA;AACH,CAAC,CAAA;AA9DY,QAAA,YAAY,gBA8DxB"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@agnostack/next-shopify",
-  "version": "1.3.2-alpha.25",
+  "version": "1.3.2-alpha.26",
   "author": "agnoStack Dev <developers@agnostack.com> (https://agnostack.com)",
   "owner": "agnoStack",
   "description": "Please contact agnoStack via info@agnostack.com for any questions",