@shopify/shopify-api 11.14.0 → 12.0.0

package/dist/cjs/test-helpers/get-jwt.js

@@ -1,6 +1,7 @@
 'use strict';
 
-var jwt = require('jsonwebtoken');
+var crypto = require('crypto');
+var jose = require('jose');
 var _const = require('./const.js');
 var getShopValue = require('./get-shop-value.js');
 
@@ -13,7 +14,7 @@ var getShopValue = require('./get-shop-value.js');
  * @param overrides Optional overrides for the JWT payload.
  * @returns {TestJwt} The JWT token and the JWT payload used to create the token.
  */
-function getJwt(store, apiKey, apiSecretKey, overrides = {}) {
+async function getJwt(store, apiKey, apiSecretKey, overrides = {}) {
     const date = new Date();
     const shop = getShopValue.getShopValue(store);
     const payload = {
@@ -28,9 +29,9 @@ function getJwt(store, apiKey, apiSecretKey, overrides = {}) {
         sid: '0987654321',
         ...overrides,
     };
-    const token = jwt.sign(payload, apiSecretKey, {
-        algorithm: 'HS256',
-    });
+    const token = await new jose.SignJWT(payload)
+        .setProtectedHeader({ alg: 'HS256' })
+        .sign(crypto.createSecretKey(Buffer.from(apiSecretKey)));
     return { token, payload };
 }
 

package/dist/cjs/test-helpers/get-jwt.js.map

@@ -1 +1 @@
-{"version":3,"file":"get-jwt.js","sources":["../../../../../test-helpers/get-jwt.ts"],"sourcesContent":["import jwt from 'jsonwebtoken';\n\nimport {JwtPayload} from '../lib';\n\nimport {USER_ID} from './const';\nimport {getShopValue} from './get-shop-value';\n\ninterface TestJwt {\n  token: string;\n  payload: JwtPayload;\n}\n\n/**\n * Creates and signs a JWT token to use in faking authorization for testing.\n *\n * @param store The name of the store for which to create a valid JWT token.\n * @param apiKey The Client ID/API key for the store for which to create a valid JWT token.\n * @param apiSecretKey The API secret for the store for which to create a valid JWT token.\n * @param overrides Optional overrides for the JWT payload.\n * @returns {TestJwt} The JWT token and the JWT payload used to create the token.\n */\nexport function getJwt(\n  store: string,\n  apiKey: string,\n  apiSecretKey: string,\n  overrides: Partial<JwtPayload> = {},\n): TestJwt {\n  const date = new Date();\n  const shop: string = getShopValue(store);\n  const payload = {\n    iss: `${shop}/admin`,\n    dest: `https://${shop}`,\n    aud: apiKey,\n    sub: `${USER_ID}`,\n    exp: date.getTime() / 1000 + 3600,\n    nbf: date.getTime() / 1000 - 3600,\n    iat: date.getTime() / 1000 - 3600,\n    jti: '1234567890',\n    sid: '0987654321',\n    ...overrides,\n  };\n\n  const token = jwt.sign(payload, apiSecretKey, {\n    algorithm: 'HS256',\n  });\n\n  return {token, payload};\n}\n"],"names":["getShopValue","USER_ID"],"mappings":";;;;;;AAYA;;;;;;;;AAQG;AACG,SAAU,MAAM,CACpB,KAAa,EACb,MAAc,EACd,YAAoB,EACpB,SAAA,GAAiC,EAAE,EAAA;AAEnC,IAAA,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE;AACvB,IAAA,MAAM,IAAI,GAAWA,yBAAY,CAAC,KAAK,CAAC;AACxC,IAAA,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,CAAA,EAAG,IAAI,CAAA,MAAA,CAAQ;QACpB,IAAI,EAAE,CAAA,QAAA,EAAW,IAAI,CAAA,CAAE;AACvB,QAAA,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,CAAA,EAAGC,cAAO,CAAA,CAAE;QACjB,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI;QACjC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI;QACjC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI;AACjC,QAAA,GAAG,EAAE,YAAY;AACjB,QAAA,GAAG,EAAE,YAAY;AACjB,QAAA,GAAG,SAAS;KACb;IAED,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,CAAC,OAAO,EAAE,YAAY,EAAE;AAC5C,QAAA,SAAS,EAAE,OAAO;AACnB,KAAA,CAAC;AAEF,IAAA,OAAO,EAAC,KAAK,EAAE,OAAO,EAAC;AACzB;;;;"}
+{"version":3,"file":"get-jwt.js","sources":["../../../../../test-helpers/get-jwt.ts"],"sourcesContent":["import {createSecretKey} from 'crypto';\n\nimport {SignJWT} from 'jose';\n\nimport {JwtPayload} from '../lib';\n\nimport {USER_ID} from './const';\nimport {getShopValue} from './get-shop-value';\n\ninterface TestJwt {\n  token: string;\n  payload: JwtPayload;\n}\n\n/**\n * Creates and signs a JWT token to use in faking authorization for testing.\n *\n * @param store The name of the store for which to create a valid JWT token.\n * @param apiKey The Client ID/API key for the store for which to create a valid JWT token.\n * @param apiSecretKey The API secret for the store for which to create a valid JWT token.\n * @param overrides Optional overrides for the JWT payload.\n * @returns {TestJwt} The JWT token and the JWT payload used to create the token.\n */\nexport async function getJwt(\n  store: string,\n  apiKey: string,\n  apiSecretKey: string,\n  overrides: Partial<JwtPayload> = {},\n): Promise<TestJwt> {\n  const date = new Date();\n  const shop: string = getShopValue(store);\n  const payload = {\n    iss: `${shop}/admin`,\n    dest: `https://${shop}`,\n    aud: apiKey,\n    sub: `${USER_ID}`,\n    exp: date.getTime() / 1000 + 3600,\n    nbf: date.getTime() / 1000 - 3600,\n    iat: date.getTime() / 1000 - 3600,\n    jti: '1234567890',\n    sid: '0987654321',\n    ...overrides,\n  };\n  const token = await new SignJWT(payload)\n    .setProtectedHeader({alg: 'HS256'})\n    .sign(createSecretKey(Buffer.from(apiSecretKey)));\n\n  return {token, payload};\n}\n"],"names":["getShopValue","USER_ID","SignJWT","createSecretKey"],"mappings":";;;;;;;AAcA;;;;;;;;AAQG;AACI,eAAe,MAAM,CAC1B,KAAa,EACb,MAAc,EACd,YAAoB,EACpB,SAAA,GAAiC,EAAE,EAAA;AAEnC,IAAA,MAAM,IAAI,GAAG,IAAI,IAAI,EAAE;AACvB,IAAA,MAAM,IAAI,GAAWA,yBAAY,CAAC,KAAK,CAAC;AACxC,IAAA,MAAM,OAAO,GAAG;QACd,GAAG,EAAE,CAAA,EAAG,IAAI,CAAA,MAAA,CAAQ;QACpB,IAAI,EAAE,CAAA,QAAA,EAAW,IAAI,CAAA,CAAE;AACvB,QAAA,GAAG,EAAE,MAAM;QACX,GAAG,EAAE,CAAA,EAAGC,cAAO,CAAA,CAAE;QACjB,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI;QACjC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI;QACjC,GAAG,EAAE,IAAI,CAAC,OAAO,EAAE,GAAG,IAAI,GAAG,IAAI;AACjC,QAAA,GAAG,EAAE,YAAY;AACjB,QAAA,GAAG,EAAE,YAAY;AACjB,QAAA,GAAG,SAAS;KACb;AACD,IAAA,MAAM,KAAK,GAAG,MAAM,IAAIC,YAAO,CAAC,OAAO;AACpC,SAAA,kBAAkB,CAAC,EAAC,GAAG,EAAE,OAAO,EAAC;SACjC,IAAI,CAACC,sBAAe,CAAC,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC;AAEnD,IAAA,OAAO,EAAC,KAAK,EAAE,OAAO,EAAC;AACzB;;;;"}

package/dist/cjs/test-helpers/setup-valid-request.js

@@ -1,7 +1,6 @@
 'use strict';
 
 var types = require('../runtime/crypto/types.js');
-require('../runtime/crypto/crypto.js');
 var utils = require('../runtime/crypto/utils.js');
 var getShopValue = require('./get-shop-value.js');
 var getHostValue = require('./get-host-value.js');
@@ -26,10 +25,10 @@ async function setUpValidRequest(options, request) {
     let authenticatedRequest;
     switch (options.type) {
         case exports.RequestType.Admin:
-            authenticatedRequest = adminRequest(request, options.store, options.apiKey, options.apiSecretKey);
+            authenticatedRequest = await adminRequest(request, options.store, options.apiKey, options.apiSecretKey);
             break;
         case exports.RequestType.Bearer:
-            authenticatedRequest = bearerRequest(request, options.store, options.apiKey, options.apiSecretKey);
+            authenticatedRequest = await bearerRequest(request, options.store, options.apiKey, options.apiSecretKey);
             break;
         case exports.RequestType.Extension:
             authenticatedRequest = extensionRequest(request, options.store, options.apiSecretKey, options.body, options.headers);
@@ -40,8 +39,8 @@ async function setUpValidRequest(options, request) {
     }
     return authenticatedRequest;
 }
-function adminRequest(request, store, apiKey, apiSecretKey) {
-    const { token } = getJwt.getJwt(store, apiKey, apiSecretKey);
+async function adminRequest(request, store, apiKey, apiSecretKey) {
+    const { token } = await getJwt.getJwt(store, apiKey, apiSecretKey);
     const url = new URL(request.url);
     url.searchParams.set('embedded', '1');
     url.searchParams.set('shop', getShopValue.getShopValue(store));
@@ -49,8 +48,8 @@ function adminRequest(request, store, apiKey, apiSecretKey) {
     url.searchParams.set('id_token', token);
     return new Request(url.href, request);
 }
-function bearerRequest(request, store, apiKey, apiSecretKey) {
-    const { token } = getJwt.getJwt(store, apiKey, apiSecretKey);
+async function bearerRequest(request, store, apiKey, apiSecretKey) {
+    const { token } = await getJwt.getJwt(store, apiKey, apiSecretKey);
     const authenticatedRequest = new Request(request);
     authenticatedRequest.headers.set('authorization', `Bearer ${token}`);
     return authenticatedRequest;

package/dist/cjs/test-helpers/setup-valid-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"setup-valid-request.js","sources":["../../../../../test-helpers/setup-valid-request.ts"],"sourcesContent":["import {HashFormat, createSHA256HMAC} from '../runtime/crypto';\n\nimport {getShopValue} from './get-shop-value';\nimport {getHostValue} from './get-host-value';\nimport {getJwt} from './get-jwt';\nimport {getHmac} from './get-hmac';\n\nexport enum RequestType {\n  Admin,\n  Bearer,\n  Extension,\n  Public,\n}\n\ninterface ValidBaseRequestOptions {\n  type: RequestType.Admin | RequestType.Bearer;\n  store: string;\n  apiSecretKey: string;\n  apiKey: string;\n}\n\ninterface ValidExtensionRequestOptions {\n  type: RequestType.Extension;\n  store: string;\n  apiSecretKey: string;\n  body?: any;\n  headers?: Record<string, string>;\n}\n\ninterface ValidPublicRequestOptions {\n  type: RequestType.Public;\n  store: string;\n  apiSecretKey: string;\n}\n\nexport type ValidRequestOptions =\n  | ValidBaseRequestOptions\n  | ValidExtensionRequestOptions\n  | ValidPublicRequestOptions;\n\n/**\n * Duplicates a Request object and decorates the duplicated object with fake authorization headers or query string parameters.\n *\n * @param {ValidRequestOptions} options Provides the type of authorization method to fake for the provided Request, and the inputs required to fake the authorization.\n * @param {Request} request The Request object to be decorated with fake authorization headers or query string parameters.\n * @returns {Request} A duplicate of the provided Request object with faked authorization headers or query string parameters.\n */\nexport async function setUpValidRequest(\n  options: ValidRequestOptions,\n  request: Request,\n) {\n  let authenticatedRequest: Request;\n  switch (options.type) {\n    case RequestType.Admin:\n      authenticatedRequest = adminRequest(\n        request,\n        options.store,\n        options.apiKey,\n        options.apiSecretKey,\n      );\n      break;\n    case RequestType.Bearer:\n      authenticatedRequest = bearerRequest(\n        request,\n        options.store,\n        options.apiKey,\n        options.apiSecretKey,\n      );\n      break;\n    case RequestType.Extension:\n      authenticatedRequest = extensionRequest(\n        request,\n        options.store,\n        options.apiSecretKey,\n        options.body,\n        options.headers,\n      );\n      break;\n    case RequestType.Public:\n      authenticatedRequest = await publicRequest(\n        request,\n        options.store,\n        options.apiSecretKey,\n      );\n      break;\n  }\n\n  return authenticatedRequest;\n}\n\nfunction adminRequest(\n  request: Request,\n  store: string,\n  apiKey: string,\n  apiSecretKey: string,\n) {\n  const {token} = getJwt(store, apiKey, apiSecretKey);\n\n  const url = new URL(request.url);\n  url.searchParams.set('embedded', '1');\n  url.searchParams.set('shop', getShopValue(store));\n  url.searchParams.set('host', getHostValue(store));\n  url.searchParams.set('id_token', token);\n  return new Request(url.href, request);\n}\n\nfunction bearerRequest(\n  request: Request,\n  store: string,\n  apiKey: string,\n  apiSecretKey: string,\n) {\n  const {token} = getJwt(store, apiKey, apiSecretKey);\n\n  const authenticatedRequest = new Request(request);\n  authenticatedRequest.headers.set('authorization', `Bearer ${token}`);\n\n  return authenticatedRequest;\n}\n\nfunction extensionRequest(\n  request: Request,\n  store: string,\n  apiSecretKey: string,\n  body: any,\n  headers?: Record<string, string>,\n) {\n  const bodyString = JSON.stringify(body);\n\n  const authenticatedRequest = new Request(request, {\n    method: 'POST',\n    body: bodyString,\n  });\n  authenticatedRequest.headers.set(\n    'X-Shopify-Hmac-Sha256',\n    getHmac(bodyString, apiSecretKey),\n  );\n  authenticatedRequest.headers.set(\n    'X-Shopify-Shop-Domain',\n    getShopValue(store),\n  );\n  if (headers) {\n    for (const [key, value] of Object.entries(headers)) {\n      authenticatedRequest.headers.set(key, value);\n    }\n  }\n\n  return authenticatedRequest;\n}\n\nasync function publicRequest(\n  request: Request,\n  store: string,\n  apiSecretKey: string,\n) {\n  const url = new URL(request.url);\n  url.searchParams.set('shop', getShopValue(store));\n  url.searchParams.set('timestamp', String(Math.trunc(Date.now() / 1000) - 1));\n\n  const params = Object.fromEntries(url.searchParams.entries());\n  const string = Object.entries(params)\n    .sort(([val1], [val2]) => val1.localeCompare(val2))\n    .reduce((acc, [key, value]) => {\n      return `${acc}${key}=${value}`;\n    }, '');\n\n  url.searchParams.set(\n    'signature',\n    await createSHA256HMAC(apiSecretKey, string, HashFormat.Hex),\n  );\n\n  return new Request(url.href, request);\n}\n"],"names":["RequestType","getJwt","getShopValue","getHostValue","getHmac","createSHA256HMAC","HashFormat"],"mappings":";;;;;;;;;;AAOYA;AAAZ,CAAA,UAAY,WAAW,EAAA;AACrB,IAAA,WAAA,CAAA,WAAA,CAAA,OAAA,CAAA,GAAA,CAAA,CAAA,GAAA,OAAK;AACL,IAAA,WAAA,CAAA,WAAA,CAAA,QAAA,CAAA,GAAA,CAAA,CAAA,GAAA,QAAM;AACN,IAAA,WAAA,CAAA,WAAA,CAAA,WAAA,CAAA,GAAA,CAAA,CAAA,GAAA,WAAS;AACT,IAAA,WAAA,CAAA,WAAA,CAAA,QAAA,CAAA,GAAA,CAAA,CAAA,GAAA,QAAM;AACR,CAAC,EALWA,mBAAW,KAAXA,mBAAW,GAAA,EAAA,CAAA,CAAA;AAiCvB;;;;;;AAMG;AACI,eAAe,iBAAiB,CACrC,OAA4B,EAC5B,OAAgB,EAAA;AAEhB,IAAA,IAAI,oBAA6B;AACjC,IAAA,QAAQ,OAAO,CAAC,IAAI;QAClB,KAAKA,mBAAW,CAAC,KAAK;AACpB,YAAA,oBAAoB,GAAG,YAAY,CACjC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,YAAY,CACrB;YACD;QACF,KAAKA,mBAAW,CAAC,MAAM;AACrB,YAAA,oBAAoB,GAAG,aAAa,CAClC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,YAAY,CACrB;YACD;QACF,KAAKA,mBAAW,CAAC,SAAS;YACxB,oBAAoB,GAAG,gBAAgB,CACrC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,OAAO,CAChB;YACD;QACF,KAAKA,mBAAW,CAAC,MAAM;AACrB,YAAA,oBAAoB,GAAG,MAAM,aAAa,CACxC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,YAAY,CACrB;YACD;;AAGJ,IAAA,OAAO,oBAAoB;AAC7B;AAEA,SAAS,YAAY,CACnB,OAAgB,EAChB,KAAa,EACb,MAAc,EACd,YAAoB,EAAA;AAEpB,IAAA,MAAM,EAAC,KAAK,EAAC,GAAGC,aAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC;IAEnD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;IAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;AACrC,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAEC,yBAAY,CAAC,KAAK,CAAC,CAAC;AACjD,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAEC,yBAAY,CAAC,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;IACvC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACvC;AAEA,SAAS,aAAa,CACpB,OAAgB,EAChB,KAAa,EACb,MAAc,EACd,YAAoB,EAAA;AAEpB,IAAA,MAAM,EAAC,KAAK,EAAC,GAAGF,aAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC;AAEnD,IAAA,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;IACjD,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;AAEpE,IAAA,OAAO,oBAAoB;AAC7B;AAEA,SAAS,gBAAgB,CACvB,OAAgB,EAChB,KAAa,EACb,YAAoB,EACpB,IAAS,EACT,OAAgC,EAAA;IAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAEvC,IAAA,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE;AAChD,QAAA,MAAM,EAAE,MAAM;AACd,QAAA,IAAI,EAAE,UAAU;AACjB,KAAA,CAAC;AACF,IAAA,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAC9B,uBAAuB,EACvBG,eAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAClC;AACD,IAAA,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAC9B,uBAAuB,EACvBF,yBAAY,CAAC,KAAK,CAAC,CACpB;IACD,IAAI,OAAO,EAAE;AACX,QAAA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAClD,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QAC9C;IACF;AAEA,IAAA,OAAO,oBAAoB;AAC7B;AAEA,eAAe,aAAa,CAC1B,OAAgB,EAChB,KAAa,EACb,YAAoB,EAAA;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AAChC,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAEA,yBAAY,CAAC,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5E,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;AAC7D,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM;AACjC,SAAA,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;SACjD,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,KAAI;AAC5B,QAAA,OAAO,GAAG,GAAG,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,EAAE;IAChC,CAAC,EAAE,EAAE,CAAC;AAER,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,WAAW,EACX,MAAMG,sBAAgB,CAAC,YAAY,EAAE,MAAM,EAAEC,gBAAU,CAAC,GAAG,CAAC,CAC7D;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACvC;;;;"}
+{"version":3,"file":"setup-valid-request.js","sources":["../../../../../test-helpers/setup-valid-request.ts"],"sourcesContent":["import {HashFormat, createSHA256HMAC} from '../runtime/crypto';\n\nimport {getShopValue} from './get-shop-value';\nimport {getHostValue} from './get-host-value';\nimport {getJwt} from './get-jwt';\nimport {getHmac} from './get-hmac';\n\nexport enum RequestType {\n  Admin,\n  Bearer,\n  Extension,\n  Public,\n}\n\ninterface ValidBaseRequestOptions {\n  type: RequestType.Admin | RequestType.Bearer;\n  store: string;\n  apiSecretKey: string;\n  apiKey: string;\n}\n\ninterface ValidExtensionRequestOptions {\n  type: RequestType.Extension;\n  store: string;\n  apiSecretKey: string;\n  body?: any;\n  headers?: Record<string, string>;\n}\n\ninterface ValidPublicRequestOptions {\n  type: RequestType.Public;\n  store: string;\n  apiSecretKey: string;\n}\n\nexport type ValidRequestOptions =\n  | ValidBaseRequestOptions\n  | ValidExtensionRequestOptions\n  | ValidPublicRequestOptions;\n\n/**\n * Duplicates a Request object and decorates the duplicated object with fake authorization headers or query string parameters.\n *\n * @param {ValidRequestOptions} options Provides the type of authorization method to fake for the provided Request, and the inputs required to fake the authorization.\n * @param {Request} request The Request object to be decorated with fake authorization headers or query string parameters.\n * @returns {Request} A duplicate of the provided Request object with faked authorization headers or query string parameters.\n */\nexport async function setUpValidRequest(\n  options: ValidRequestOptions,\n  request: Request,\n) {\n  let authenticatedRequest: Request;\n  switch (options.type) {\n    case RequestType.Admin:\n      authenticatedRequest = await adminRequest(\n        request,\n        options.store,\n        options.apiKey,\n        options.apiSecretKey,\n      );\n      break;\n    case RequestType.Bearer:\n      authenticatedRequest = await bearerRequest(\n        request,\n        options.store,\n        options.apiKey,\n        options.apiSecretKey,\n      );\n      break;\n    case RequestType.Extension:\n      authenticatedRequest = extensionRequest(\n        request,\n        options.store,\n        options.apiSecretKey,\n        options.body,\n        options.headers,\n      );\n      break;\n    case RequestType.Public:\n      authenticatedRequest = await publicRequest(\n        request,\n        options.store,\n        options.apiSecretKey,\n      );\n      break;\n  }\n\n  return authenticatedRequest;\n}\n\nasync function adminRequest(\n  request: Request,\n  store: string,\n  apiKey: string,\n  apiSecretKey: string,\n) {\n  const {token} = await getJwt(store, apiKey, apiSecretKey);\n\n  const url = new URL(request.url);\n  url.searchParams.set('embedded', '1');\n  url.searchParams.set('shop', getShopValue(store));\n  url.searchParams.set('host', getHostValue(store));\n  url.searchParams.set('id_token', token);\n  return new Request(url.href, request);\n}\n\nasync function bearerRequest(\n  request: Request,\n  store: string,\n  apiKey: string,\n  apiSecretKey: string,\n) {\n  const {token} = await getJwt(store, apiKey, apiSecretKey);\n\n  const authenticatedRequest = new Request(request);\n  authenticatedRequest.headers.set('authorization', `Bearer ${token}`);\n\n  return authenticatedRequest;\n}\n\nfunction extensionRequest(\n  request: Request,\n  store: string,\n  apiSecretKey: string,\n  body: any,\n  headers?: Record<string, string>,\n) {\n  const bodyString = JSON.stringify(body);\n\n  const authenticatedRequest = new Request(request, {\n    method: 'POST',\n    body: bodyString,\n  });\n  authenticatedRequest.headers.set(\n    'X-Shopify-Hmac-Sha256',\n    getHmac(bodyString, apiSecretKey),\n  );\n  authenticatedRequest.headers.set(\n    'X-Shopify-Shop-Domain',\n    getShopValue(store),\n  );\n  if (headers) {\n    for (const [key, value] of Object.entries(headers)) {\n      authenticatedRequest.headers.set(key, value);\n    }\n  }\n\n  return authenticatedRequest;\n}\n\nasync function publicRequest(\n  request: Request,\n  store: string,\n  apiSecretKey: string,\n) {\n  const url = new URL(request.url);\n  url.searchParams.set('shop', getShopValue(store));\n  url.searchParams.set('timestamp', String(Math.trunc(Date.now() / 1000) - 1));\n\n  const params = Object.fromEntries(url.searchParams.entries());\n  const string = Object.entries(params)\n    .sort(([val1], [val2]) => val1.localeCompare(val2))\n    .reduce((acc, [key, value]) => {\n      return `${acc}${key}=${value}`;\n    }, '');\n\n  url.searchParams.set(\n    'signature',\n    await createSHA256HMAC(apiSecretKey, string, HashFormat.Hex),\n  );\n\n  return new Request(url.href, request);\n}\n"],"names":["RequestType","getJwt","getShopValue","getHostValue","getHmac","createSHA256HMAC","HashFormat"],"mappings":";;;;;;;;;AAOYA;AAAZ,CAAA,UAAY,WAAW,EAAA;AACrB,IAAA,WAAA,CAAA,WAAA,CAAA,OAAA,CAAA,GAAA,CAAA,CAAA,GAAA,OAAK;AACL,IAAA,WAAA,CAAA,WAAA,CAAA,QAAA,CAAA,GAAA,CAAA,CAAA,GAAA,QAAM;AACN,IAAA,WAAA,CAAA,WAAA,CAAA,WAAA,CAAA,GAAA,CAAA,CAAA,GAAA,WAAS;AACT,IAAA,WAAA,CAAA,WAAA,CAAA,QAAA,CAAA,GAAA,CAAA,CAAA,GAAA,QAAM;AACR,CAAC,EALWA,mBAAW,KAAXA,mBAAW,GAAA,EAAA,CAAA,CAAA;AAiCvB;;;;;;AAMG;AACI,eAAe,iBAAiB,CACrC,OAA4B,EAC5B,OAAgB,EAAA;AAEhB,IAAA,IAAI,oBAA6B;AACjC,IAAA,QAAQ,OAAO,CAAC,IAAI;QAClB,KAAKA,mBAAW,CAAC,KAAK;AACpB,YAAA,oBAAoB,GAAG,MAAM,YAAY,CACvC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,YAAY,CACrB;YACD;QACF,KAAKA,mBAAW,CAAC,MAAM;AACrB,YAAA,oBAAoB,GAAG,MAAM,aAAa,CACxC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,YAAY,CACrB;YACD;QACF,KAAKA,mBAAW,CAAC,SAAS;YACxB,oBAAoB,GAAG,gBAAgB,CACrC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,YAAY,EACpB,OAAO,CAAC,IAAI,EACZ,OAAO,CAAC,OAAO,CAChB;YACD;QACF,KAAKA,mBAAW,CAAC,MAAM;AACrB,YAAA,oBAAoB,GAAG,MAAM,aAAa,CACxC,OAAO,EACP,OAAO,CAAC,KAAK,EACb,OAAO,CAAC,YAAY,CACrB;YACD;;AAGJ,IAAA,OAAO,oBAAoB;AAC7B;AAEA,eAAe,YAAY,CACzB,OAAgB,EAChB,KAAa,EACb,MAAc,EACd,YAAoB,EAAA;AAEpB,IAAA,MAAM,EAAC,KAAK,EAAC,GAAG,MAAMC,aAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC;IAEzD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;IAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC;AACrC,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAEC,yBAAY,CAAC,KAAK,CAAC,CAAC;AACjD,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAEC,yBAAY,CAAC,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,EAAE,KAAK,CAAC;IACvC,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACvC;AAEA,eAAe,aAAa,CAC1B,OAAgB,EAChB,KAAa,EACb,MAAc,EACd,YAAoB,EAAA;AAEpB,IAAA,MAAM,EAAC,KAAK,EAAC,GAAG,MAAMF,aAAM,CAAC,KAAK,EAAE,MAAM,EAAE,YAAY,CAAC;AAEzD,IAAA,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,OAAO,CAAC;IACjD,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,EAAE,CAAA,OAAA,EAAU,KAAK,CAAA,CAAE,CAAC;AAEpE,IAAA,OAAO,oBAAoB;AAC7B;AAEA,SAAS,gBAAgB,CACvB,OAAgB,EAChB,KAAa,EACb,YAAoB,EACpB,IAAS,EACT,OAAgC,EAAA;IAEhC,MAAM,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAEvC,IAAA,MAAM,oBAAoB,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE;AAChD,QAAA,MAAM,EAAE,MAAM;AACd,QAAA,IAAI,EAAE,UAAU;AACjB,KAAA,CAAC;AACF,IAAA,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAC9B,uBAAuB,EACvBG,eAAO,CAAC,UAAU,EAAE,YAAY,CAAC,CAClC;AACD,IAAA,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAC9B,uBAAuB,EACvBF,yBAAY,CAAC,KAAK,CAAC,CACpB;IACD,IAAI,OAAO,EAAE;AACX,QAAA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE;YAClD,oBAAoB,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC;QAC9C;IACF;AAEA,IAAA,OAAO,oBAAoB;AAC7B;AAEA,eAAe,aAAa,CAC1B,OAAgB,EAChB,KAAa,EACb,YAAoB,EAAA;IAEpB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC;AAChC,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAEA,yBAAY,CAAC,KAAK,CAAC,CAAC;IACjD,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;AAE5E,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAC,GAAG,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC;AAC7D,IAAA,MAAM,MAAM,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM;AACjC,SAAA,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,IAAI,CAAC,aAAa,CAAC,IAAI,CAAC;SACjD,MAAM,CAAC,CAAC,GAAG,EAAE,CAAC,GAAG,EAAE,KAAK,CAAC,KAAI;AAC5B,QAAA,OAAO,GAAG,GAAG,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,KAAK,EAAE;IAChC,CAAC,EAAE,EAAE,CAAC;AAER,IAAA,GAAG,CAAC,YAAY,CAAC,GAAG,CAClB,WAAW,EACX,MAAMG,sBAAgB,CAAC,YAAY,EAAE,MAAM,EAAEC,gBAAU,CAAC,GAAG,CAAC,CAC7D;IAED,OAAO,IAAI,OAAO,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC;AACvC;;;;"}