@shopify/cli 3.69.4 → 3.71.0

package/dist/assets/cli-ruby/lib/shopify_cli/identity_auth.rb

@@ -1,332 +0,0 @@
-require "base64"
-require "digest"
-require "json"
-require "net/http"
-require "securerandom"
-require "openssl"
-require "shopify_cli"
-require "uri"
-require "webrick"
-
-module ShopifyCLI
-  class IdentityAuth
-    include SmartProperties
-
-    autoload :EnvAuthToken, "shopify_cli/identity_auth/env_auth_token"
-
-    class Error < StandardError; end
-    class Timeout < StandardError; end
-    LocalRequest = Struct.new(:method, :path, :query, :protocol)
-
-    DEFAULT_PORT = 3456
-    REDIRECT_HOST = "http://127.0.0.1:#{DEFAULT_PORT}"
-
-    APPLICATION_SCOPES = {
-      "shopify" => %w[https://api.shopify.com/auth/shop.admin.graphql https://api.shopify.com/auth/shop.admin.themes https://api.shopify.com/auth/partners.collaborator-relationships.readonly],
-      "storefront_renderer_production" => %w[https://api.shopify.com/auth/shop.storefront-renderer.devtools],
-      "partners" => %w[https://api.shopify.com/auth/partners.app.cli.access],
-    }
-
-    APPLICATION_CLIENT_IDS = {
-      "shopify" => "7ee65a63608843c577db8b23c4d7316ea0a01bd2f7594f8a9c06ea668c1b775c",
-      "storefront_renderer_production" => "ee139b3d-5861-4d45-b387-1bc3ada7811c",
-      "partners" => "271e16d403dfa18082ffb3d197bd2b5f4479c3fc32736d69296829cbb28d41a6",
-    }
-
-    DEV_APPLICATION_CLIENT_IDS = {
-      "shopify" => "e92482cebb9bfb9fb5a0199cc770fde3de6c8d16b798ee73e36c9d815e070e52",
-      "storefront_renderer_production" => "46f603de-894f-488d-9471-5b721280ff49",
-      "partners" => "df89d73339ac3c6c5f0a98d9ca93260763e384d51d6038da129889c308973978",
-    }
-
-    EXCHANGE_TOKENS = APPLICATION_SCOPES.keys.map do |key|
-      "#{key}_exchange_token".to_sym
-    end
-
-    IDENTITY_ACCESS_TOKENS = %i[
-      identity_access_token
-      identity_refresh_token
-    ]
-
-    property! :ctx
-    property :store, default: -> { ShopifyCLI::DB.new }
-    property :state_token, accepts: String, default: SecureRandom.hex(30)
-    property :code_verifier, accepts: String, default: SecureRandom.hex(30)
-
-    attr_accessor :response_query
-
-    def authenticate(spinner: false)
-      return if with_spinner(spinner, ctx.message("core.login.spinner.initiating")) do
-        attempt_reauthenticate
-      end
-
-      initiate_authentication
-
-      begin
-        request_access_token(code: receive_access_code)
-      rescue IdentityAuth::Timeout => e
-        ctx.abort(e.message)
-      end
-      with_spinner(spinner, ctx.message("core.login.spinner.finalizing")) do
-        request_exchange_tokens
-      end
-    end
-
-    def with_spinner(spinner, message, &block)
-      result = nil
-      if spinner
-        CLI::UI::Spinner.spin(message) do
-          result = block.call
-        end
-      else
-        result = block.call
-      end
-      result
-    end
-
-    def fetch_or_auth_partners_token
-      if EnvAuthToken.partners_token_present?
-        return Environment.auth_token if Environment.run_as_subprocess?
-        return EnvAuthToken.fetch_exchanged_partners_token do |env_token|
-          exchange_partners_auth_token(env_token)
-        end
-      end
-
-      ShopifyCLI::DB.get(:partners_exchange_token) do
-        IdentityAuth.new(ctx: ctx).authenticate
-        ShopifyCLI::DB.get(:partners_exchange_token)
-      end
-    end
-
-    def exchange_partners_auth_token(subject_token)
-      application = "partners"
-      request_exchange_token(
-        audience: client_id_for_application(application),
-        scopes: APPLICATION_SCOPES[application],
-        subject_token: subject_token,
-      )
-    end
-
-    def self.environment_auth_token?
-      !!Environment.auth_token
-    end
-
-    def self.authenticated?
-      environment_auth_token? || IDENTITY_ACCESS_TOKENS.all? { |key| ShopifyCLI::DB.exists?(key) }
-    end
-
-    def reauthenticate
-      return if attempt_reauthenticate
-      ctx.abort(ctx.message("core.identity_auth.error.reauthenticate", ShopifyCLI::TOOL_NAME))
-    end
-
-    def attempt_reauthenticate
-      refresh_exchange_tokens || refresh_access_tokens
-    end
-
-    def code_challenge
-      @code_challenge ||= Base64.urlsafe_encode64(
-        OpenSSL::Digest::SHA256.digest(code_verifier),
-        padding: false,
-      )
-    end
-
-    def server
-      @server ||= begin
-        server = WEBrick::HTTPServer.new(
-          Port: DEFAULT_PORT,
-          Logger: WEBrick::Log.new(File.open(File::NULL, "w")),
-          AccessLog: [],
-        )
-        server.mount("/", Servlet, self, state_token)
-        server
-      end
-    end
-
-    def self.delete_tokens_and_keys
-      ShopifyCLI::DB.del(*IDENTITY_ACCESS_TOKENS)
-      ShopifyCLI::DB.del(*EXCHANGE_TOKENS)
-    end
-
-    private
-
-    def initiate_authentication
-      @server_thread = Thread.new { server.start }
-      params = {
-        client_id: client_id,
-        scope: scopes(APPLICATION_SCOPES.values.flatten),
-        redirect_uri: REDIRECT_HOST,
-        state: state_token,
-        response_type: :code,
-      }
-      params.merge!(challange_params)
-      uri = URI.parse("#{auth_url}/authorize")
-      uri.query = URI.encode_www_form(params)
-      open_browser_authentication(uri)
-    end
-
-    def open_browser_authentication(uri)
-      ctx.open_browser_url!(uri)
-    end
-
-    def receive_access_code
-      @access_code ||= begin
-        @server_thread.join(240)
-        raise Timeout, ctx.message("core.identity_auth.error.timeout") if response_query.nil?
-        raise Error, response_query["error_description"] unless response_query["error"].nil?
-        response_query["code"]
-      end
-    end
-
-    def request_access_token(code:)
-      resp = post_token_request(
-        grant_type: :authorization_code,
-        code: code,
-        redirect_uri: REDIRECT_HOST,
-        client_id: client_id,
-        code_verifier: code_verifier,
-      )
-      store.set(
-        identity_access_token: resp["access_token"],
-        identity_refresh_token: resp["refresh_token"],
-      )
-    end
-
-    def refresh_access_tokens
-      return false unless IDENTITY_ACCESS_TOKENS.all? { |key| store.exists?(key) }
-
-      resp = post_token_request(
-        grant_type: :refresh_token,
-        access_token: store.get(:identity_access_token),
-        refresh_token: store.get(:identity_refresh_token),
-        client_id: client_id,
-      )
-      store.set(
-        identity_access_token: resp["access_token"],
-        identity_refresh_token: resp["refresh_token"],
-      )
-
-      # Need to refresh the exchange token on successful access token refresh
-      request_exchange_tokens
-
-      true
-    rescue
-      store.del(*IDENTITY_ACCESS_TOKENS)
-      false
-    end
-
-    def refresh_exchange_tokens
-      return false unless EXCHANGE_TOKENS.all? { |key| store.exists?(key) }
-
-      request_exchange_tokens
-
-      true
-    rescue
-      store.del(*EXCHANGE_TOKENS)
-      false
-    end
-
-    def request_exchange_tokens
-      APPLICATION_SCOPES.each do |key, scopes|
-        request_and_save_exchange_token(key, client_id_for_application(key), scopes)
-      end
-    end
-
-    def request_and_save_exchange_token(name, audience, additional_scopes)
-      return if name == "shopify" && !store.exists?(:shop)
-      access_token = request_exchange_token(
-        audience: audience,
-        scopes: scopes(additional_scopes),
-        subject_token: store.get(:identity_access_token),
-        destination: name == "shopify" ? "https://#{store.get(:shop)}/admin" : nil
-      )["access_token"]
-      store.set("#{name}_exchange_token".to_sym => access_token)
-      ctx.debug("#{name}_exchange_token: " + access_token)
-    end
-
-    def request_exchange_token(audience:, scopes:, subject_token:, destination: nil)
-      params = {
-        grant_type: "urn:ietf:params:oauth:grant-type:token-exchange",
-        requested_token_type: "urn:ietf:params:oauth:token-type:access_token",
-        subject_token_type: "urn:ietf:params:oauth:token-type:access_token",
-        client_id: client_id,
-        audience: audience,
-        scope: scopes,
-        subject_token: subject_token,
-        destination: destination,
-      }.compact
-      # ctx.debug(params)
-      post_token_request(params)
-    end
-
-    def post_token_request(params)
-      post_request("/token", params)
-    end
-
-    def post_request(endpoint, params)
-      uri = URI.parse("#{auth_url}#{endpoint}")
-      https = Net::HTTP.new(uri.host, uri.port)
-      https.use_ssl = true
-      https.verify_mode = OpenSSL::SSL::VERIFY_NONE if ENV["SSL_VERIFY_NONE"]
-      request = Net::HTTP::Post.new(uri.path)
-      request["User-Agent"] = "Shopify CLI #{::ShopifyCLI::VERSION}"
-      request.body = URI.encode_www_form(params)
-      res = https.request(request)
-      unless res.is_a?(Net::HTTPSuccess)
-        error_msg = JSON.parse(res.body)["error_description"]
-        shop = store.get(:shop)
-        if error_msg.include?("destination")
-          store.del(:shop)
-          ctx.abort(ctx.message("core.identity_auth.error.invalid_destination", shop))
-        end
-        raise Error, error_msg
-      end
-      JSON.parse(res.body)
-    end
-
-    def challange_params
-      {
-        code_challenge: code_challenge,
-        code_challenge_method: "S256",
-      }
-    end
-
-    def auth_url
-      if Environment.use_local_partners_instance?
-        "https://identity.myshopify.io/oauth"
-      elsif Environment.use_spin?
-        "https://identity.#{Environment.spin_url}/oauth"
-      else
-        "https://accounts.shopify.com/oauth"
-      end
-    end
-
-    def client_id_for_application(application_name)
-      client_ids = if Environment.use_local_partners_instance? || Environment.use_spin?
-        DEV_APPLICATION_CLIENT_IDS
-      else
-        APPLICATION_CLIENT_IDS
-      end
-
-      client_ids[application_name]
-    end
-
-    def scopes(additional_scopes = [])
-      (["openid"] + additional_scopes).tap do |result|
-        result << "employee" if ShopifyCLI::Shopifolk.acting_as_shopify_organization?
-      end.join(" ")
-    end
-
-    def client_id
-      if Environment.use_local_partners_instance? || Environment.use_spin?
-        Constants::Identity::CLIENT_ID_DEV
-      else
-        # In the future we might want to use Identity's dynamic
-        # registration. To migrate to a dynamic client ID we
-        # need to refactor some code that relies on a static
-        # value for the client
-        Constants::Identity::CLIENT_ID
-      end
-    end
-  end
-end

package/dist/assets/cli-ruby/lib/shopify_cli/js_system.rb

@@ -1,115 +0,0 @@
-require "shopify_cli"
-
-module ShopifyCLI
-  ##
-  # ShopifyCLI::JsSystem allows conditional system calls of npm or yarn commands.
-  #
-  class JsSystem
-    include SmartProperties
-
-    YARN_CORE_COMMAND = "yarn"
-    NPM_CORE_COMMAND = "npm"
-
-    class << self
-      ##
-      # Proxy to instance method `ShopifyCLI::JsSystem.new.yarn?`
-      #
-      # #### Parameters
-      # - `ctx`: running context from your command
-      #
-      # #### Example
-      #
-      #   ShopifyCLI::JsSystem.yarn?(ctx)
-      #
-      def yarn?(ctx)
-        JsSystem.new(ctx: ctx).yarn?
-      end
-
-      ##
-      # Proxy to instance method `ShopifyCLI::JsSystem.new.call`
-      #
-      # #### Parameters
-      # - `ctx`: running context from your command
-      # - `yarn`: The proc, array, or string command to run if yarn is available
-      # - `npm`: The proc, array, or string command to run if npm is available
-      #
-      # #### Example
-      #
-      #   ShopifyCLI::JsSystem.call(ctx, yarn: ['install', '--silent'], npm: ['install', '--no-audit'])
-      #
-      def call(ctx, yarn:, npm:, capture_response: false)
-        JsSystem.new(ctx: ctx).call(yarn: yarn, npm: npm, capture_response: capture_response)
-      end
-    end
-
-    property :ctx, accepts: ShopifyCLI::Context
-
-    ##
-    # Returns the name of the JS package manager being used
-    #
-    # #### Example
-    #
-    #   ShopifyCLI::JsSystem.new(ctx: ctx).package_manager
-    #
-    def package_manager
-      yarn? ? YARN_CORE_COMMAND : NPM_CORE_COMMAND
-    end
-
-    ##
-    # Returns true if yarn is available and false otherwise
-    #
-    # #### Example
-    #
-    #   ShopifyCLI::JsSystem.new(ctx: ctx).yarn?
-    #
-    def yarn?
-      @has_yarn ||= begin
-        cmd_path = @ctx.which("yarn")
-        File.exist?(File.join(ctx.root, "yarn.lock")) && !cmd_path.nil?
-      end
-    end
-
-    ##
-    # Runs a command with the proper JS package manager depending on the result of `yarn?`
-    #
-    # #### Parameters
-    # - `ctx`: running context from your command
-    # - `yarn`: The proc, array, or string command to run if yarn is available
-    # - `npm`: The proc, array, or string command to run if npm is available
-    # - `capture_response`: The boolean flag to capture the output of the running command if it is set to true
-    #
-    # #### Example
-    #
-    #   ShopifyCLI::JsSystem.new(ctx: ctx).call(
-    #     yarn: ['install', '--silent'],
-    #     npm: ['install', '--no-audit'],
-    #     capture_response: false
-    #   )
-    #
-    def call(yarn:, npm:, capture_response: false)
-      if yarn?
-        call_command(yarn, YARN_CORE_COMMAND, capture_response)
-      else
-        call_command(npm, NPM_CORE_COMMAND, capture_response)
-      end
-    end
-
-    private
-
-    def call_command(command, core_command, capture_response)
-      if command.is_a?(String) || command.is_a?(Array)
-        capture_response ? call_with_capture(command, core_command) : call_without_capture(command, core_command)
-      else
-        command.call
-      end
-    end
-
-    def call_with_capture(command, core_command)
-      CLI::Kit::System.capture3(core_command, *command, chdir: ctx.root)
-    end
-
-    def call_without_capture(command, core_command)
-      CLI::Kit::System.system(core_command, *command, chdir: ctx.root).success?
-    end
-  end
-end

package/dist/assets/cli-ruby/lib/shopify_cli/lazy_delegator.rb

@@ -1,55 +0,0 @@
-require "delegate"
-
-module ShopifyCLI
-  ##
-  # `LazyDelegator` defers initialization of its underlying delegatee until the
-  # latter is accessed for the first time due to a method call that the
-  # delegator cannot handle itself:
-  #
-  #   result = LazyDelegator.new do
-  #     # carry out costly operation ...
-  #   end
-  #
-  #   result      # referencing the object itself does not result in Proc evaluation
-  #   result.to_h # however, calling a method on it will result in Proc evaluation
-  #
-  # LazyDelegator lends itself to being subclassed in scenarios where some
-  # facts are known and others are costly to compute:
-  #
-  #   class LazySpecificationHandler < ShopifyCLI::LazyDelegator
-  #     attr_reader :identifier
-  #
-  #     def initialize(identifier, &initializer)
-  #       super(&initializer)
-  #       @identifier = identifier
-  #     end
-  #   end
-  #
-  #   handler = LazySpecificationHandler.new(:product_subscription) do
-  #      # fetch specification from the Partners Dashboard API ...
-  #   end
-  #
-  #   # Accessing identifier will not result in Proc evaluation as it is
-  #   # available as an attribute of the delegator itself
-  #   handler.identifier # => :product_subscription
-  #
-  #   # Accessing the specification will result in evaluation of the Proc
-  #   # and in our example in a subsequent network call
-  #   handler.specification # => <Extension::Models::Specifcation:...>
-  #
-  class LazyDelegator < SimpleDelegator
-    def initialize(&delegatee_initializer)
-      super([false, delegatee_initializer])
-    end
-
-    protected
-
-    def __getobj__(*)
-      initialized, value_or_initializer = super
-      return value_or_initializer if initialized
-      value_or_initializer.call.tap do |value|
-        __setobj__([true, value])
-      end
-    end
-  end
-end