@drawbridge/drawbridge-utils 0.0.67 → 0.0.68

package/dist/shopify.d.ts

@@ -1,259 +0,0 @@
-import crypto from 'crypto';
-import { decrypt, encrypt } from './encrypt.js';
-import './token.js';
-
-const SHOPIFY_ADMIN_API_VERSION = '2025-01';
-const REFRESH_TOKEN_LIFETIME_MS = 90 * 24 * 60 * 60 * 1000;
-const ACCESS_TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1000;
-const OAUTH_STATE_TTL_MS = 5 * 60 * 1000;
-
-const signOAuthState = ({ organizationId, shop }) => {
-
-	const payload = Buffer.from( JSON.stringify({
-		exp : Date.now() + OAUTH_STATE_TTL_MS,
-		organizationId,
-		shop
-	}) ).toString( 'base64url' );
-
-	const signature = crypto
-		.createHmac( 'sha256', process.env.SHOPIFY_API_SECRET )
-		.update( payload )
-		.digest( 'base64url' );
-
-	return payload + '.' + signature;
-
-};
-
-const verifyOAuthState = ( raw ) => {
-
-	if( ! raw ) return null;
-
-	const [ payload, signature ] = raw.split( '.' );
-
-	if( ! payload || ! signature ) return null;
-
-	const expected = crypto
-		.createHmac( 'sha256', process.env.SHOPIFY_API_SECRET )
-		.update( payload )
-		.digest( 'base64url' );
-
-	if( signature.length !== expected.length ) return null;
-
-	const valid = crypto.timingSafeEqual(
-		Buffer.from( signature ),
-		Buffer.from( expected )
-	);
-
-	if( ! valid ) return null;
-
-	let parsed;
-
-	try {
-
-		parsed = JSON.parse( Buffer.from( payload, 'base64url' ).toString() );
-
-	} catch {
-
-		return null;
-
-	}
-	if( ! parsed?.exp || parsed.exp < Date.now() ) return null;
-
-	return parsed;
-
-};
-
-// Verifies the HMAC Shopify includes on OAuth callback query strings. Sort by
-// parameter NAME (not full key=value pair) per Shopify spec — matches the
-// official @shopify/shopify-api SDK. A plain .sort() compares whole strings,
-// which would diverge when one name is a prefix of another and the next char
-// sorts before '=' in ASCII (e.g. `state` vs `state2`).
-const verifyOAuthCallbackHmac = ({ hmac, rawQuery }) => {
-
-	const message = ( rawQuery || '' )
-		.split( '&' )
-		.filter( pair => ! pair.startsWith( 'hmac=' ) )
-		.sort( ( a, b ) => {
-
-			const nameA = a.split( '=' )[ 0 ];
-			const nameB = b.split( '=' )[ 0 ];
-
-			return nameA < nameB ? -1 : nameA > nameB ? 1 : 0;
-
-		})
-		.join( '&' );
-
-	const digest = crypto
-		.createHmac( 'sha256', process.env.SHOPIFY_API_SECRET )
-		.update( message )
-		.digest( 'hex' );
-
-	const digestBuf = Buffer.from( digest );
-	const hmacBuf = Buffer.from( hmac || '' );
-
-	return digestBuf.length === hmacBuf.length
-		&& crypto.timingSafeEqual( digestBuf, hmacBuf );
-
-};
-
-const shopifyOAuthFetch = async ( url, body ) => {
-
-	const response = await fetch( url, {
-		method : 'POST',
-		headers : {
-			'Content-Type' : 'application/json'
-		},
-		body : JSON.stringify( body )
-	});
-
-	if( ! response.ok ){
-
-		const text = await response.text().catch( () => '' );
-		const error = new Error( response.status + ': ' + text );
-
-		error.status = response.status;
-
-		throw error;
-
-	}
-
-	return response.json();
-
-};
-
-const ping = async ({ adminAccessToken, domain }) => {
-
-	const response = await fetch(
-		`https://${ domain }/admin/api/${ SHOPIFY_ADMIN_API_VERSION }/shop.json`,
-		{
-			headers : {
-				'X-Shopify-Access-Token' : adminAccessToken
-			}
-		}
-	);
-
-	if( ! response.ok ){
-
-		const text = await response.text().catch( () => '' );
-		const error = new Error( response.status + ': ' + text );
-
-		error.status = response.status;
-
-		throw error;
-
-	}
-
-};
-
-const resolveConnectionSettings = async ({ connection, controller }) => {
-
-	const connectionSettings = connection?.settings ? decrypt( connection.settings ) : {};
-
-	if( ! connection?.credential ){
-
-		return connectionSettings;
-
-	}
-
-	const credential = await controller.get({
-		collection : 'credential',
-		query : {
-			id : connection.credential
-		}
-	});
-
-	const credentialSettings = credential?.settings ? decrypt( credential.settings ) : {};
-
-	return {
-		...credentialSettings,
-		...connectionSettings
-	};
-
-};
-
-const refreshAdminToken = async ({ connection, controller }) => {
-
-	const credential = await controller.get({
-		collection : 'credential',
-		query : {
-			id : connection.credential
-		}
-	});
-
-	if( ! credential ){
-
-		throw new Error( 'refreshAdminToken: credential not found for connection ' + connection.id );
-
-	}
-	const settings = decrypt( credential.settings );
-	const domain = credential.provider?.id;
-	const { refreshToken } = settings;
-
-	const data = await shopifyOAuthFetch(
-		`https://${ domain }/admin/oauth/access_token`,
-		{
-			grant_type : 'refresh_token',
-			client_id : process.env.SHOPIFY_API_KEY,
-			client_secret : process.env.SHOPIFY_API_SECRET,
-			refresh_token : refreshToken
-		}
-	);
-
-	const adminAccessToken = data.access_token;
-	const newRefreshToken = data.refresh_token;
-	const expiresIn = data.expires_in;
-	const tokenExpiresAt = expiresIn ? new Date( Date.now() + ( expiresIn * 1000 ) ) : null;
-	const refreshTokenExpiresAt = new Date( Date.now() + REFRESH_TOKEN_LIFETIME_MS );
-
-	await ping({ adminAccessToken, domain });
-
-	await controller.update({
-		collection : 'credential',
-		data : {
-			$set : {
-				settings : encrypt({
-					...settings,
-					adminAccessToken,
-					refreshToken : newRefreshToken,
-					refreshTokenExpiresAt,
-					tokenExpiresAt
-				})
-			}
-		},
-		query : {
-			id : credential.id
-		}
-	});
-
-	return adminAccessToken;
-
-};
-
-const getAdminToken = async ({ connection, controller }) => {
-
-	if( ! connection?.credential ){
-
-		return null;
-
-	}
-	const settings = await resolveConnectionSettings({ connection, controller });
-	const { adminAccessToken, refreshToken, tokenExpiresAt } = settings;
-
-	if( ! refreshToken ){
-
-		return adminAccessToken;
-
-	}
-	const needsRefresh = ! tokenExpiresAt ||
-		new Date( tokenExpiresAt ) < new Date( Date.now() + ACCESS_TOKEN_REFRESH_BUFFER_MS );
-
-	if( needsRefresh ){
-
-		return refreshAdminToken({ connection, controller });
-
-	}
-	return adminAccessToken;
-
-};
-
-export { getAdminToken, ping, refreshAdminToken, resolveConnectionSettings, signOAuthState, verifyOAuthCallbackHmac, verifyOAuthState };

package/dist/shopify.js

@@ -1,213 +0,0 @@
-// lib/shopify.js
-import crypto3 from "crypto";
-
-// lib/encrypt.js
-import crypto2 from "crypto";
-
-// lib/token.js
-import crypto from "crypto";
-var generate = (bytes = 32, encoding = "base64url") => {
-  const buf = crypto.randomBytes(bytes);
-  return encoding ? buf.toString(encoding) : buf;
-};
-
-// lib/encrypt.js
-var ALGORITHM = "aes-256-gcm";
-var getKey = () => Buffer.from(process.env.ENCRYPT_CONNECTION_SECRET, "hex");
-var encrypt = (value) => {
-  const iv = generate(12, null);
-  const cipher = crypto2.createCipheriv(ALGORITHM, getKey(), iv);
-  const data = Buffer.concat([
-    cipher.update(JSON.stringify(value), "utf8"),
-    cipher.final()
-  ]);
-  const tag = cipher.getAuthTag();
-  return [iv, tag, data].map((b) => b.toString("hex")).join(":");
-};
-var decrypt = (value) => {
-  if (typeof value !== "string") return value;
-  const [ivHex, tagHex, dataHex] = value.split(":");
-  const decipher = crypto2.createDecipheriv(
-    ALGORITHM,
-    getKey(),
-    Buffer.from(ivHex, "hex")
-  );
-  decipher.setAuthTag(Buffer.from(tagHex, "hex"));
-  const result = Buffer.concat([
-    decipher.update(Buffer.from(dataHex, "hex")),
-    decipher.final()
-  ]);
-  return JSON.parse(result.toString("utf8"));
-};
-
-// lib/shopify.js
-var SHOPIFY_ADMIN_API_VERSION = "2025-01";
-var REFRESH_TOKEN_LIFETIME_MS = 90 * 24 * 60 * 60 * 1e3;
-var ACCESS_TOKEN_REFRESH_BUFFER_MS = 5 * 60 * 1e3;
-var OAUTH_STATE_TTL_MS = 5 * 60 * 1e3;
-var signOAuthState = ({ organizationId, shop }) => {
-  const payload = Buffer.from(JSON.stringify({
-    exp: Date.now() + OAUTH_STATE_TTL_MS,
-    organizationId,
-    shop
-  })).toString("base64url");
-  const signature = crypto3.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(payload).digest("base64url");
-  return payload + "." + signature;
-};
-var verifyOAuthState = (raw) => {
-  if (!raw) return null;
-  const [payload, signature] = raw.split(".");
-  if (!payload || !signature) return null;
-  const expected = crypto3.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(payload).digest("base64url");
-  if (signature.length !== expected.length) return null;
-  const valid = crypto3.timingSafeEqual(
-    Buffer.from(signature),
-    Buffer.from(expected)
-  );
-  if (!valid) return null;
-  let parsed;
-  try {
-    parsed = JSON.parse(Buffer.from(payload, "base64url").toString());
-  } catch {
-    return null;
-  }
-  ;
-  if (!(parsed == null ? void 0 : parsed.exp) || parsed.exp < Date.now()) return null;
-  return parsed;
-};
-var verifyOAuthCallbackHmac = ({ hmac, rawQuery }) => {
-  const message = (rawQuery || "").split("&").filter((pair) => !pair.startsWith("hmac=")).sort((a, b) => {
-    const nameA = a.split("=")[0];
-    const nameB = b.split("=")[0];
-    return nameA < nameB ? -1 : nameA > nameB ? 1 : 0;
-  }).join("&");
-  const digest = crypto3.createHmac("sha256", process.env.SHOPIFY_API_SECRET).update(message).digest("hex");
-  const digestBuf = Buffer.from(digest);
-  const hmacBuf = Buffer.from(hmac || "");
-  return digestBuf.length === hmacBuf.length && crypto3.timingSafeEqual(digestBuf, hmacBuf);
-};
-var shopifyOAuthFetch = async (url, body) => {
-  const response = await fetch(url, {
-    method: "POST",
-    headers: {
-      "Content-Type": "application/json"
-    },
-    body: JSON.stringify(body)
-  });
-  if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    const error = new Error(response.status + ": " + text);
-    error.status = response.status;
-    throw error;
-  }
-  return response.json();
-};
-var ping = async ({ adminAccessToken, domain }) => {
-  const response = await fetch(
-    `https://${domain}/admin/api/${SHOPIFY_ADMIN_API_VERSION}/shop.json`,
-    {
-      headers: {
-        "X-Shopify-Access-Token": adminAccessToken
-      }
-    }
-  );
-  if (!response.ok) {
-    const text = await response.text().catch(() => "");
-    const error = new Error(response.status + ": " + text);
-    error.status = response.status;
-    throw error;
-  }
-};
-var resolveConnectionSettings = async ({ connection, controller }) => {
-  const connectionSettings = (connection == null ? void 0 : connection.settings) ? decrypt(connection.settings) : {};
-  if (!(connection == null ? void 0 : connection.credential)) {
-    return connectionSettings;
-  }
-  const credential = await controller.get({
-    collection: "credential",
-    query: {
-      id: connection.credential
-    }
-  });
-  const credentialSettings = (credential == null ? void 0 : credential.settings) ? decrypt(credential.settings) : {};
-  return {
-    ...credentialSettings,
-    ...connectionSettings
-  };
-};
-var refreshAdminToken = async ({ connection, controller }) => {
-  var _a;
-  const credential = await controller.get({
-    collection: "credential",
-    query: {
-      id: connection.credential
-    }
-  });
-  if (!credential) {
-    throw new Error("refreshAdminToken: credential not found for connection " + connection.id);
-  }
-  ;
-  const settings = decrypt(credential.settings);
-  const domain = (_a = credential.provider) == null ? void 0 : _a.id;
-  const { refreshToken } = settings;
-  const data = await shopifyOAuthFetch(
-    `https://${domain}/admin/oauth/access_token`,
-    {
-      grant_type: "refresh_token",
-      client_id: process.env.SHOPIFY_API_KEY,
-      client_secret: process.env.SHOPIFY_API_SECRET,
-      refresh_token: refreshToken
-    }
-  );
-  const adminAccessToken = data.access_token;
-  const newRefreshToken = data.refresh_token;
-  const expiresIn = data.expires_in;
-  const tokenExpiresAt = expiresIn ? new Date(Date.now() + expiresIn * 1e3) : null;
-  const refreshTokenExpiresAt = new Date(Date.now() + REFRESH_TOKEN_LIFETIME_MS);
-  await ping({ adminAccessToken, domain });
-  await controller.update({
-    collection: "credential",
-    data: {
-      $set: {
-        settings: encrypt({
-          ...settings,
-          adminAccessToken,
-          refreshToken: newRefreshToken,
-          refreshTokenExpiresAt,
-          tokenExpiresAt
-        })
-      }
-    },
-    query: {
-      id: credential.id
-    }
-  });
-  return adminAccessToken;
-};
-var getAdminToken = async ({ connection, controller }) => {
-  if (!(connection == null ? void 0 : connection.credential)) {
-    return null;
-  }
-  ;
-  const settings = await resolveConnectionSettings({ connection, controller });
-  const { adminAccessToken, refreshToken, tokenExpiresAt } = settings;
-  if (!refreshToken) {
-    return adminAccessToken;
-  }
-  ;
-  const needsRefresh = !tokenExpiresAt || new Date(tokenExpiresAt) < new Date(Date.now() + ACCESS_TOKEN_REFRESH_BUFFER_MS);
-  if (needsRefresh) {
-    return refreshAdminToken({ connection, controller });
-  }
-  ;
-  return adminAccessToken;
-};
-export {
-  getAdminToken,
-  ping,
-  refreshAdminToken,
-  resolveConnectionSettings,
-  signOAuthState,
-  verifyOAuthCallbackHmac,
-  verifyOAuthState
-};