@shopify/shopify-api 3.1.3 → 4.2.0

package/CHANGELOG.md

@@ -5,29 +5,54 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](http://keepachangelog.com/en/1.0.0/)
 and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
+## Unreleased
+
+## [4.2.0] - 2022-07-20
+
+- Return a 401 instead of 403 when webhooks fail validation [#425](https://github.com/Shopify/shopify-api-node/pull/425)
+- Add optional new methods `deleteSession` and `findSessionsByShop` to `SessionStorage`, with the corresponding implementations for the various session storage adapters [#418](https://github.com/Shopify/shopify-api-node/pull/418)
+- Include subset of query body in API deprecation logs [#426](https://github.com/Shopify/shopify-api-node/pull/426)
+
+## [4.1.0] - 2022-07-14
+
+- Add new method to construct the host app URL [#419](https://github.com/Shopify/shopify-api-node/pull/419)
+
+## [4.0.0] - 2022-07-04
+
+- ⚠️ [Breaking] Add REST resources for July 2022 API version, add `LATEST_API_VERSION` constant, remove support and REST resources for July 2021 (`2021-07`) API version [#415](https://github.com/Shopify/shopify-api-node/pull/415)
+- Add support for July 2022 API version [#409](https://github.com/Shopify/shopify-api-node/pull/409)
+
+### Fixes
+
+- Fix a bug where the PostgreSQL session storage always attempted to create the sessions table [#413](https://github.com/Shopify/shopify-api-node/pull/413)
+
 ## [3.1.3] - 2022-06-08
 
 ### Fixes
+
 - Return instances of `Session` from session storages, not POJOs.
 
 ## [3.1.2] - 2022-06-07
 
 ### Added
+
 - Store user id and expiration date of online tokens
 
 ### Fixes
-- Properly parse a non-json HTTP response [#257](https://github.com/Shopify/shopify-node-api/issues/257)
-- Don’t create a SQLite DB file if the SQLite storage is not used.
 
+- Properly parse a non-json HTTP response [#257](https://github.com/Shopify/shopify-api-node/issues/257)
+- Don’t create a SQLite DB file if the SQLite storage is not used.
 
 ## [3.1.0] - 2022-05-16
 
 ### Added
-- Support for specifying the URI scheme of the host [#385](https://github.com/Shopify/shopify-node-api/pull/385)
+
+- Support for specifying the URI scheme of the host [#385](https://github.com/Shopify/shopify-api-node/pull/385)
 - Add optional `saving` parameter to `serialize` of `Base` class - default is `false` and will include read-only attributes in returned object; `true` used for `save` when committing via API to Shopify.
 
 ### Fixed
-- Fixes [#363](https://github.com/Shopify/shopify-node-api/issues/363)
+
+- Fixes [#363](https://github.com/Shopify/shopify-api-node/issues/363)
   - Webhooks `register` now checks for any attempt to register a GDPR topic (not done via API but by Partner Dashboard), provides an error message in response
   - For topics that don't exist, `register` checks the response from the initial API call for an `errors` field and returns accordingly
 
@@ -35,22 +60,22 @@ and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ### Added
 
-- Allow REST resources to configure a deny list of attributes to be excluded when saving [#355](https://github.com/Shopify/shopify-node-api/pull/355)
+- Allow REST resources to configure a deny list of attributes to be excluded when saving [#355](https://github.com/Shopify/shopify-api-node/pull/355)
 
 ## [3.0.0] - 2022-04-04
 
 ### Added
 
-- ⚠️ [Breaking] Removing API version `2021-04` [#343](https://github.com/Shopify/shopify-node-api/pull/343)
+- ⚠️ [Breaking] Removing API version `2021-04` [#343](https://github.com/Shopify/shopify-api-node/pull/343)
 - ⚠️ [Breaking] The `HttpResponseError` error and its flavours (all returned from HTTP requests) have been slightly altered:
   - They now take in a hash of values, and will always include the response code, body (as a string if the response is not JSON), and headers
   - All response fields are now contained within a `response` object, to make it easier to access them
-- ⚠️ [Breaking] Update supported Admin API versions [#310](https://github.com/Shopify/shopify-node-api/pull/310)
-- Allow full paths in REST requests [#301](https://github.com/Shopify/shopify-node-api/pull/301)
+- ⚠️ [Breaking] Update supported Admin API versions [#310](https://github.com/Shopify/shopify-api-node/pull/310)
+- Allow full paths in REST requests [#301](https://github.com/Shopify/shopify-api-node/pull/301)
 
 ### Fixed
 
-- ⚠️ [Breaking] Stop responding to the request in the GraphQL Proxy function, returning Shopify's response instead [#312](https://github.com/Shopify/shopify-node-api/pull/312)
+- ⚠️ [Breaking] Stop responding to the request in the GraphQL Proxy function, returning Shopify's response instead [#312](https://github.com/Shopify/shopify-api-node/pull/312)
 
   The examples below are in [express](https://expressjs.com/); you will now need to handle the response yourself.
 
@@ -75,76 +100,76 @@ and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ### Added
 
-- Add support for January 2022 API version [#285](https://github.com/Shopify/shopify-node-api/pull/285)
+- Add support for January 2022 API version [#285](https://github.com/Shopify/shopify-api-node/pull/285)
 
 ## [2.0.0] - 2021-10-28
 
 ### Added
 
-- Add a 5 second `clockTolerance` to fix `jwt not active` error [#227](https://github.com/Shopify/shopify-node-api/pull/227)
-- [Breaking] Change default for OAuth.beginAuth to online sessions [#203](https://github.com/Shopify/shopify-node-api/pull/203)
-  - see [oauth.md](https://github.com/Shopify/shopify-node-api/blob/main/docs/usage/oauth.md) for updated docs
-- [Breaking] Return and delete session in `validateAuthCallback` [#217](https://github.com/Shopify/shopify-node-api/pull/217)
-  - see [oauth.md](https://github.com/Shopify/shopify-node-api/blob/main/docs/usage/oauth.md) for updated usage
-- [Breaking] Extract `addHandler` and `getHandler` methods for webhooks out of `register` [#205](https://github.com/Shopify/shopify-node-api/pull/205)
-- [Breaking] Sessions no longer default to `false` for `isOnline` [#169](https://github.com/Shopify/shopify-node-api/pull/169)
-- Required `Session` arguments must be passed to the constructor [#169](https://github.com/Shopify/shopify-node-api/pull/169)
-- Allow `undefined` in `AuthScopes` [#169](https://github.com/Shopify/shopify-node-api/pull/169)
+- Add a 5 second `clockTolerance` to fix `jwt not active` error [#227](https://github.com/Shopify/shopify-api-node/pull/227)
+- [Breaking] Change default for OAuth.beginAuth to online sessions [#203](https://github.com/Shopify/shopify-api-node/pull/203)
+  - see [oauth.md](https://github.com/Shopify/shopify-api-node/blob/main/docs/usage/oauth.md) for updated docs
+- [Breaking] Return and delete session in `validateAuthCallback` [#217](https://github.com/Shopify/shopify-api-node/pull/217)
+  - see [oauth.md](https://github.com/Shopify/shopify-api-node/blob/main/docs/usage/oauth.md) for updated usage
+- [Breaking] Extract `addHandler` and `getHandler` methods for webhooks out of `register` [#205](https://github.com/Shopify/shopify-api-node/pull/205)
+- [Breaking] Sessions no longer default to `false` for `isOnline` [#169](https://github.com/Shopify/shopify-api-node/pull/169)
+- Required `Session` arguments must be passed to the constructor [#169](https://github.com/Shopify/shopify-api-node/pull/169)
+- Allow `undefined` in `AuthScopes` [#169](https://github.com/Shopify/shopify-api-node/pull/169)
 
 ## [1.4.3] - 2021-10-22
 
 ### Fixed
 
-- Fixed the HTTP client error messages to expand objects [#252](https://github.com/Shopify/shopify-node-api/pull/252)
+- Fixed the HTTP client error messages to expand objects [#252](https://github.com/Shopify/shopify-api-node/pull/252)
 
 ## [1.4.2] - 2021-10-20
 
-- Added `October21` to `ApiVersion` [#247](https://github.com/Shopify/shopify-node-api/pull/247)
+- Added `October21` to `ApiVersion` [#247](https://github.com/Shopify/shopify-api-node/pull/247)
 
 ## [1.4.1] - 2021-06-11
 
-- Don't include extra params when calculating local hmac [#196](https://github.com/Shopify/shopify-node-api/pull/196)
+- Don't include extra params when calculating local hmac [#196](https://github.com/Shopify/shopify-api-node/pull/196)
 
 ## [1.4.0] - 2021-05-21
 
 ### Added
 
-- Add support for registering Google Pub/Sub webhooks [#181](https://github.com/Shopify/shopify-node-api/pull/181)
-- Added `July21` to `ApiVersion` [#181](https://github.com/Shopify/shopify-node-api/pull/181)
+- Add support for registering Google Pub/Sub webhooks [#181](https://github.com/Shopify/shopify-api-node/pull/181)
+- Added `July21` to `ApiVersion` [#181](https://github.com/Shopify/shopify-api-node/pull/181)
 
 ## [1.3.0] - 2021-05-12
 
 ### Added
 
 - Added Storefront API client under `Shopify.Clients.Storefront`
-- Add `isActive()` method to `Session` class to check if session is active, replace `Session` with `SessionInterface` when used as a type [#153](https://github.com/Shopify/shopify-node-api/pull/153)
+- Add `isActive()` method to `Session` class to check if session is active, replace `Session` with `SessionInterface` when used as a type [#153](https://github.com/Shopify/shopify-api-node/pull/153)
 
 ## [1.2.1] - 2021-03-26
 
 ### Added
 
-- Added `April21` to `ApiVersion` [#149](https://github.com/Shopify/shopify-node-api/pull/149)
+- Added `April21` to `ApiVersion` [#149](https://github.com/Shopify/shopify-api-node/pull/149)
 
 ## [1.2.0] - 2021-03-16
 
 ### Added
 
-- Allow plain objects to be returned from the `loadCallback` on `CustomSessionStorage` [#126](https://github.com/shopify/shopify-node-api/pull/126)
-- Documentation and example code for `CustomSessionStorage` [#129](https://github.com/shopify/shopify-node-api/pull/129)
+- Allow plain objects to be returned from the `loadCallback` on `CustomSessionStorage` [#126](https://github.com/Shopify/shopify-api-node/pull/126)
+- Documentation and example code for `CustomSessionStorage` [#129](https://github.com/Shopify/shopify-api-node/pull/129)
 
 ### Fixed
 
-- Throw a different error for a missing cookie upon OAuth return [#131](https://github.com/shopify/shopify-node-api/pull/131)
-- Improved documentation for GraphQL and Rest Clients. [#123](https://github.com/Shopify/shopify-node-api/pull/123)
-- Made Docs directory more browseable in GitHub. [#136](https://github.com/Shopify/shopify-node-api/pull/136)
-- Make sure `CustomSessionStorage` converts the `expires` field from a string to `Date`. [#132](https://github.com/Shopify/shopify-node-api/pull/132)
-- Made `limit` optional for get-requests with query [#135](https://github.com/Shopify/shopify-node-api/pull/135)
+- Throw a different error for a missing cookie upon OAuth return [#131](https://github.com/Shopify/shopify-api-node/pull/131)
+- Improved documentation for GraphQL and Rest Clients. [#123](https://github.com/Shopify/shopify-api-node/pull/123)
+- Made Docs directory more browseable in GitHub. [#136](https://github.com/Shopify/shopify-api-node/pull/136)
+- Make sure `CustomSessionStorage` converts the `expires` field from a string to `Date`. [#132](https://github.com/Shopify/shopify-api-node/pull/132)
+- Made `limit` optional for get-requests with query [#135](https://github.com/Shopify/shopify-api-node/pull/135)
 
 ## [1.1.0] - 2021-03-02
 
 - Minor text/doc changes
-- Added `2021-01` API version to enum. [#117](https://github.com/shopify/shopify-node-api/pull/117)
-- Allow retrieving offline sessions using `loadCurrentSession`. [#119](https://github.com/shopify/shopify-node-api/pull/119)
+- Added `2021-01` API version to enum. [#117](https://github.com/Shopify/shopify-api-node/pull/117)
+- Allow retrieving offline sessions using `loadCurrentSession`. [#119](https://github.com/Shopify/shopify-api-node/pull/119)
 
 ## [1.0.0]
 
@@ -154,56 +179,56 @@ and adheres to [Semantic Versioning](http://semver.org/spec/v2.0.0.html).
 
 ### Added
 
-- Added `AuthScopes` value object to allow apps to easily check whether scopes have been updated. [#110](https://github.com/shopify/shopify-node-api/pull/110)
+- Added `AuthScopes` value object to allow apps to easily check whether scopes have been updated. [#110](https://github.com/Shopify/shopify-api-node/pull/110)
 
 ### Fixed
 
-- GraphQL Proxy attempts to parse the request body as JSON before passing it to the client. [#106](https://github.com/shopify/shopify-node-api/pull/106)
+- GraphQL Proxy attempts to parse the request body as JSON before passing it to the client. [#106](https://github.com/Shopify/shopify-api-node/pull/106)
 
 ## [0.4.0] - 2021-02-10
 
 ### Added
 
-- Webhooks types are now exported outside the library [#91](https://github.com/shopify/shopify-node-api/pull/91)
-- Added support for private apps [#99](https://github.com/Shopify/shopify-node-api/pull/99)
-- `USER_AGENT_PREFIX` added to Context, to add agent to all requests [#101](https://github.com/Shopify/shopify-node-api/pull/101)
-- Add link to tutorial on how to rotate credentials if neccesary [#107](https://github.com/Shopify/shopify-node-api/pull/107)
+- Webhooks types are now exported outside the library [#91](https://github.com/Shopify/shopify-api-node/pull/91)
+- Added support for private apps [#99](https://github.com/Shopify/shopify-api-node/pull/99)
+- `USER_AGENT_PREFIX` added to Context, to add agent to all requests [#101](https://github.com/Shopify/shopify-api-node/pull/101)
+- Add link to tutorial on how to rotate credentials if neccesary [#107](https://github.com/Shopify/shopify-api-node/pull/107)
 
 ### Fixed
 
-- Export `withSession` utility method [#96](https://github.com/Shopify/shopify-node-api/pull/96)
-- GraphQL Client appropriately handles queries with variables [#97](https://github.com/Shopify/shopify-node-api/pull/97)
-- Use cryptographically random bytes to generate nonce [#98](https://github.com/Shopify/shopify-node-api/pull/98)
-- Stop using `SameSite=none` cookies for OAuth, using `lax` instead [#100](https://github.com/Shopify/shopify-node-api/pull/100)
+- Export `withSession` utility method [#96](https://github.com/Shopify/shopify-api-node/pull/96)
+- GraphQL Client appropriately handles queries with variables [#97](https://github.com/Shopify/shopify-api-node/pull/97)
+- Use cryptographically random bytes to generate nonce [#98](https://github.com/Shopify/shopify-api-node/pull/98)
+- Stop using `SameSite=none` cookies for OAuth, using `lax` instead [#100](https://github.com/Shopify/shopify-api-node/pull/100)
 
 ## [0.3.1] - 2021-02-03
 
 ### Fixed
 
-- Fixed an issue when deleting the current session for embedded apps [#88](https://github.com/shopify/shopify-node-api/pull/88)
+- Fixed an issue when deleting the current session for embedded apps [#88](https://github.com/Shopify/shopify-api-node/pull/88)
 
 ## [0.3.0] - 2021-01-27
 
 ### Added
 
-- Add `withSession` utility method [#83](https://github.com/shopify/shopify-node-api/pull/83)
+- Add `withSession` utility method [#83](https://github.com/Shopify/shopify-api-node/pull/83)
 
 ### Fixed
 
-- Refactor library public interface [#87](https://github.com/shopify/shopify-node-api/pull/87)
-- Check if a webhook is registered before calling Shopify [#82](https://github.com/shopify/shopify-node-api/pull/82)
+- Refactor library public interface [#87](https://github.com/Shopify/shopify-api-node/pull/87)
+- Check if a webhook is registered before calling Shopify [#82](https://github.com/Shopify/shopify-api-node/pull/82)
 
 ## [0.2.2] - 2021-01-14
 
 ### Fixed
 
-- Ensure that the OAuth session expiration matches the cookie expiration [#72](https://github.com/shopify/shopify-node-api/pull/72) / [#73](https://github.com/shopify/shopify-node-api/pull/73)
+- Ensure that the OAuth session expiration matches the cookie expiration [#72](https://github.com/Shopify/shopify-api-node/pull/72) / [#73](https://github.com/Shopify/shopify-api-node/pull/73)
 
 ## [0.2.0] - 2021-01-13
 
-- Preserve the OAuth cookie session for a few seconds so SPA can perform their initial load using it [#70](https://github.com/shopify/shopify-node-api/pull/70)
-- Session fetches now return `undefined` when a session is not available [#64](https://github.com/shopify/shopify-node-api/pull/64)
-- Add `deleteCurrentSession` utils method [#60](https://github.com/shopify/shopify-node-api/pull/60)
+- Preserve the OAuth cookie session for a few seconds so SPA can perform their initial load using it [#70](https://github.com/Shopify/shopify-api-node/pull/70)
+- Session fetches now return `undefined` when a session is not available [#64](https://github.com/Shopify/shopify-api-node/pull/64)
+- Add `deleteCurrentSession` utils method [#60](https://github.com/Shopify/shopify-api-node/pull/60)
 
 ## [0.1.0] - 2020-12-17
 

package/dist/auth/session/session_storage.d.ts

@@ -21,6 +21,18 @@ interface SessionStorage {
      * @param id Id of the session to delete
      */
     deleteSession(id: string): Promise<boolean>;
+    /**
+     * Deletes an array of sessions from storage.
+     *
+     * @param ids Array of session id's to delete
+     */
+    deleteSessions?(ids: string[]): Promise<boolean>;
+    /**
+     * Return an array of sessions for a given shop (or [] if none found).
+     *
+     * @param shop shop of the session(s) to return
+     */
+    findSessionsByShop?(shop: string): Promise<SessionInterface[]>;
 }
 export { SessionStorage };
 //# sourceMappingURL=session_storage.d.ts.map

package/dist/auth/session/session_storage.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"session_storage.d.ts","sourceRoot":"","sources":["../../../src/auth/session/session_storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,SAAS,CAAC;AAEzC;;GAEG;AACH,UAAU,cAAc;IACtB;;;;OAIG;IACH,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1D;;;;OAIG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE/D;;;;OAIG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CAC7C;AAED,OAAO,EAAC,cAAc,EAAC,CAAC"}
+{"version":3,"file":"session_storage.d.ts","sourceRoot":"","sources":["../../../src/auth/session/session_storage.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,SAAS,CAAC;AAEzC;;GAEG;AACH,UAAU,cAAc;IACtB;;;;OAIG;IACH,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE1D;;;;OAIG;IACH,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC,CAAC;IAE/D;;;;OAIG;IACH,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAE5C;;;;OAIG;IACH,cAAc,CAAC,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAEjD;;;;OAIG;IACH,kBAAkB,CAAC,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAAC;CAChE;AAED,OAAO,EAAC,cAAc,EAAC,CAAC"}

package/dist/auth/session/storage/__tests__/battery-of-tests.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"battery-of-tests.d.ts","sourceRoot":"","sources":["../../../../../src/auth/session/storage/__tests__/battery-of-tests.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAErD,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,QA+F3E"}
+{"version":3,"file":"battery-of-tests.d.ts","sourceRoot":"","sources":["../../../../../src/auth/session/storage/__tests__/battery-of-tests.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,cAAc,EAAC,MAAM,uBAAuB,CAAC;AAKrD,wBAAgB,cAAc,CAAC,cAAc,EAAE,MAAM,OAAO,CAAC,cAAc,CAAC,QA6J3E"}

package/dist/auth/session/storage/__tests__/battery-of-tests.js

@@ -5,6 +5,7 @@ var tslib_1 = require("tslib");
 var context_1 = require("../../../../context");
 var session_1 = require("../../session");
 var session_utils_1 = require("../../session-utils");
+var session_test_utils_1 = require("./session-test-utils");
 function batteryOfTests(storageFactory) {
     var _this = this;
     it('can store and delete all kinds of sessions', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
@@ -187,5 +188,128 @@ function batteryOfTests(storageFactory) {
             }
         });
     }); });
+    it('can find all the sessions for a given shop', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var storage, prefix, sessions, sessions_1, sessions_1_1, session, e_2_1, shop1Sessions;
+        var e_2, _a;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, storageFactory()];
+                case 1:
+                    storage = _b.sent();
+                    prefix = 'find_sessions';
+                    sessions = [
+                        new session_1.Session("".concat(prefix, "_1"), 'find-shop1-sessions', 'state', true),
+                        new session_1.Session("".concat(prefix, "_2"), 'do-not-find-shop2-sessions', 'state', true),
+                        new session_1.Session("".concat(prefix, "_3"), 'find-shop1-sessions', 'state', true),
+                        new session_1.Session("".concat(prefix, "_4"), 'do-not-find-shop3-sessions', 'state', true),
+                    ];
+                    _b.label = 2;
+                case 2:
+                    _b.trys.push([2, 7, 8, 9]);
+                    sessions_1 = tslib_1.__values(sessions), sessions_1_1 = sessions_1.next();
+                    _b.label = 3;
+                case 3:
+                    if (!!sessions_1_1.done) return [3 /*break*/, 6];
+                    session = sessions_1_1.value;
+                    return [4 /*yield*/, expect(storage.storeSession(session)).resolves.toBe(true)];
+                case 4:
+                    _b.sent();
+                    _b.label = 5;
+                case 5:
+                    sessions_1_1 = sessions_1.next();
+                    return [3 /*break*/, 3];
+                case 6: return [3 /*break*/, 9];
+                case 7:
+                    e_2_1 = _b.sent();
+                    e_2 = { error: e_2_1 };
+                    return [3 /*break*/, 9];
+                case 8:
+                    try {
+                        if (sessions_1_1 && !sessions_1_1.done && (_a = sessions_1.return)) _a.call(sessions_1);
+                    }
+                    finally { if (e_2) throw e_2.error; }
+                    return [7 /*endfinally*/];
+                case 9:
+                    expect(storage.findSessionsByShop).toBeDefined();
+                    if (!storage.findSessionsByShop) return [3 /*break*/, 11];
+                    return [4 /*yield*/, storage.findSessionsByShop('find-shop1-sessions')];
+                case 10:
+                    shop1Sessions = _b.sent();
+                    expect(shop1Sessions).toBeDefined();
+                    if (shop1Sessions) {
+                        expect(shop1Sessions.length).toBe(2);
+                        expect((0, session_test_utils_1.sessionArraysEqual)(shop1Sessions, [
+                            sessions[0],
+                            sessions[2],
+                        ])).toBe(true);
+                    }
+                    _b.label = 11;
+                case 11: return [2 /*return*/];
+            }
+        });
+    }); });
+    it('can delete the sessions for a given array of ids', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var storage, prefix, sessions, sessions_2, sessions_2_1, session, e_3_1, shop1Sessions, idsToDelete;
+        var e_3, _a;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, storageFactory()];
+                case 1:
+                    storage = _b.sent();
+                    prefix = 'delete_sessions';
+                    sessions = [
+                        new session_1.Session("".concat(prefix, "_1"), 'delete-shop1-sessions', 'state', true),
+                        new session_1.Session("".concat(prefix, "_2"), 'do-not-delete-shop2-sessions', 'state', true),
+                        new session_1.Session("".concat(prefix, "_3"), 'delete-shop1-sessions', 'state', true),
+                        new session_1.Session("".concat(prefix, "_4"), 'do-not-delete-shop3-sessions', 'state', true),
+                    ];
+                    _b.label = 2;
+                case 2:
+                    _b.trys.push([2, 7, 8, 9]);
+                    sessions_2 = tslib_1.__values(sessions), sessions_2_1 = sessions_2.next();
+                    _b.label = 3;
+                case 3:
+                    if (!!sessions_2_1.done) return [3 /*break*/, 6];
+                    session = sessions_2_1.value;
+                    return [4 /*yield*/, expect(storage.storeSession(session)).resolves.toBe(true)];
+                case 4:
+                    _b.sent();
+                    _b.label = 5;
+                case 5:
+                    sessions_2_1 = sessions_2.next();
+                    return [3 /*break*/, 3];
+                case 6: return [3 /*break*/, 9];
+                case 7:
+                    e_3_1 = _b.sent();
+                    e_3 = { error: e_3_1 };
+                    return [3 /*break*/, 9];
+                case 8:
+                    try {
+                        if (sessions_2_1 && !sessions_2_1.done && (_a = sessions_2.return)) _a.call(sessions_2);
+                    }
+                    finally { if (e_3) throw e_3.error; }
+                    return [7 /*endfinally*/];
+                case 9:
+                    expect(storage.deleteSessions).toBeDefined();
+                    if (!(storage.deleteSessions && storage.findSessionsByShop)) return [3 /*break*/, 13];
+                    return [4 /*yield*/, storage.findSessionsByShop('delete-shop1-sessions')];
+                case 10:
+                    shop1Sessions = _b.sent();
+                    expect(shop1Sessions).toBeDefined();
+                    if (!shop1Sessions) return [3 /*break*/, 13];
+                    expect(shop1Sessions.length).toBe(2);
+                    idsToDelete = shop1Sessions.map(function (session) { return session.id; });
+                    return [4 /*yield*/, expect(storage.deleteSessions(idsToDelete)).resolves.toBe(true)];
+                case 11:
+                    _b.sent();
+                    return [4 /*yield*/, storage.findSessionsByShop('delete-shop1-sessions')];
+                case 12:
+                    shop1Sessions = _b.sent();
+                    expect(shop1Sessions).toEqual([]);
+                    _b.label = 13;
+                case 13: return [2 /*return*/];
+            }
+        });
+    }); });
 }
 exports.batteryOfTests = batteryOfTests;

package/dist/auth/session/storage/__tests__/session-test-utils.d.ts

@@ -0,0 +1,3 @@
+import { SessionInterface } from '../../types';
+export declare function sessionArraysEqual(sessionArray1: SessionInterface[], sessionArray2: SessionInterface[]): boolean;
+//# sourceMappingURL=session-test-utils.d.ts.map

package/dist/auth/session/storage/__tests__/session-test-utils.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"session-test-utils.d.ts","sourceRoot":"","sources":["../../../../../src/auth/session/storage/__tests__/session-test-utils.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,gBAAgB,EAAC,MAAM,aAAa,CAAC;AAI7C,wBAAgB,kBAAkB,CAChC,aAAa,EAAE,gBAAgB,EAAE,EACjC,aAAa,EAAE,gBAAgB,EAAE,GAChC,OAAO,CAgBT"}

package/dist/auth/session/storage/__tests__/session-test-utils.js

@@ -0,0 +1,46 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.sessionArraysEqual = void 0;
+var tslib_1 = require("tslib");
+var session_utils_1 = require("../../session-utils");
+// compare two arrays of sessions that should contain
+// the same sessions but may be in a different order
+function sessionArraysEqual(sessionArray1, sessionArray2) {
+    var e_1, _a, e_2, _b;
+    if (sessionArray1.length !== sessionArray2.length) {
+        return false;
+    }
+    try {
+        for (var sessionArray1_1 = tslib_1.__values(sessionArray1), sessionArray1_1_1 = sessionArray1_1.next(); !sessionArray1_1_1.done; sessionArray1_1_1 = sessionArray1_1.next()) {
+            var session1 = sessionArray1_1_1.value;
+            var found = false;
+            try {
+                for (var sessionArray2_1 = (e_2 = void 0, tslib_1.__values(sessionArray2)), sessionArray2_1_1 = sessionArray2_1.next(); !sessionArray2_1_1.done; sessionArray2_1_1 = sessionArray2_1.next()) {
+                    var session2 = sessionArray2_1_1.value;
+                    if ((0, session_utils_1.sessionEqual)(session1, session2)) {
+                        found = true;
+                        continue;
+                    }
+                }
+            }
+            catch (e_2_1) { e_2 = { error: e_2_1 }; }
+            finally {
+                try {
+                    if (sessionArray2_1_1 && !sessionArray2_1_1.done && (_b = sessionArray2_1.return)) _b.call(sessionArray2_1);
+                }
+                finally { if (e_2) throw e_2.error; }
+            }
+            if (!found)
+                return false;
+        }
+    }
+    catch (e_1_1) { e_1 = { error: e_1_1 }; }
+    finally {
+        try {
+            if (sessionArray1_1_1 && !sessionArray1_1_1.done && (_a = sessionArray1_1.return)) _a.call(sessionArray1_1);
+        }
+        finally { if (e_1) throw e_1.error; }
+    }
+    return true;
+}
+exports.sessionArraysEqual = sessionArraysEqual;

package/dist/auth/session/storage/custom.d.ts

@@ -6,11 +6,15 @@ export declare class CustomSessionStorage implements SessionStorage {
         [key: string]: unknown;
     } | undefined>;
     readonly deleteCallback: (id: string) => Promise<boolean>;
+    readonly deleteSessionsCallback?: ((ids: string[]) => Promise<boolean>) | undefined;
+    readonly findSessionsByShopCallback?: ((shop: string) => Promise<SessionInterface[]>) | undefined;
     constructor(storeCallback: (session: SessionInterface) => Promise<boolean>, loadCallback: (id: string) => Promise<SessionInterface | {
         [key: string]: unknown;
-    } | undefined>, deleteCallback: (id: string) => Promise<boolean>);
+    } | undefined>, deleteCallback: (id: string) => Promise<boolean>, deleteSessionsCallback?: ((ids: string[]) => Promise<boolean>) | undefined, findSessionsByShopCallback?: ((shop: string) => Promise<SessionInterface[]>) | undefined);
     storeSession(session: SessionInterface): Promise<boolean>;
     loadSession(id: string): Promise<SessionInterface | undefined>;
     deleteSession(id: string): Promise<boolean>;
+    deleteSessions(ids: string[]): Promise<boolean>;
+    findSessionsByShop(shop: string): Promise<SessionInterface[]>;
 }
 //# sourceMappingURL=custom.d.ts.map

package/dist/auth/session/storage/custom.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/storage/custom.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAGlD,qBAAa,oBAAqB,YAAW,cAAc;IAEvD,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC;IACvE,QAAQ,CAAC,YAAY,EAAE,CACrB,EAAE,EAAE,MAAM,KACP,OAAO,CAAC,gBAAgB,GAAG;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;gBAJhD,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,EAC9D,YAAY,EAAE,CACrB,EAAE,EAAE,MAAM,KACP,OAAO,CAAC,gBAAgB,GAAG;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,GAAG,SAAS,CAAC,EAC5D,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;IAO9C,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IA0C9D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CASzD"}
+{"version":3,"file":"custom.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/storage/custom.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAGlD,qBAAa,oBAAqB,YAAW,cAAc;IAEvD,QAAQ,CAAC,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC;IACvE,QAAQ,CAAC,YAAY,EAAE,CACrB,EAAE,EAAE,MAAM,KACP,OAAO,CAAC,gBAAgB,GAAG;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,GAAG,SAAS,CAAC;IACrE,QAAQ,CAAC,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC;IACzD,QAAQ,CAAC,sBAAsB,CAAC,SAAQ,MAAM,EAAE,KAAK,QAAQ,OAAO,CAAC;IACrE,QAAQ,CAAC,0BAA0B,CAAC,UAC5B,MAAM,KACT,QAAQ,gBAAgB,EAAE,CAAC;gBARvB,aAAa,EAAE,CAAC,OAAO,EAAE,gBAAgB,KAAK,OAAO,CAAC,OAAO,CAAC,EAC9D,YAAY,EAAE,CACrB,EAAE,EAAE,MAAM,KACP,OAAO,CAAC,gBAAgB,GAAG;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,GAAG,SAAS,CAAC,EAC5D,cAAc,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,EAChD,sBAAsB,CAAC,SAAQ,MAAM,EAAE,KAAK,QAAQ,OAAO,CAAC,aAAA,EAC5D,0BAA0B,CAAC,UAC5B,MAAM,KACT,QAAQ,gBAAgB,EAAE,CAAC,aAAA;IASrB,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAUzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IA0C9D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU3C,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAiB/C,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAkB3E"}

package/dist/auth/session/storage/custom.js

@@ -5,13 +5,17 @@ var tslib_1 = require("tslib");
 var session_1 = require("../session");
 var ShopifyErrors = tslib_1.__importStar(require("../../../error"));
 var CustomSessionStorage = /** @class */ (function () {
-    function CustomSessionStorage(storeCallback, loadCallback, deleteCallback) {
+    function CustomSessionStorage(storeCallback, loadCallback, deleteCallback, deleteSessionsCallback, findSessionsByShopCallback) {
         this.storeCallback = storeCallback;
         this.loadCallback = loadCallback;
         this.deleteCallback = deleteCallback;
+        this.deleteSessionsCallback = deleteSessionsCallback;
+        this.findSessionsByShopCallback = findSessionsByShopCallback;
         this.storeCallback = storeCallback;
         this.loadCallback = loadCallback;
         this.deleteCallback = deleteCallback;
+        this.deleteSessionsCallback = deleteSessionsCallback;
+        this.findSessionsByShopCallback = findSessionsByShopCallback;
     }
     CustomSessionStorage.prototype.storeSession = function (session) {
         return tslib_1.__awaiter(this, void 0, void 0, function () {
@@ -89,6 +93,57 @@ var CustomSessionStorage = /** @class */ (function () {
             });
         });
     };
+    CustomSessionStorage.prototype.deleteSessions = function (ids) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var error_4;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        if (!this.deleteSessionsCallback) return [3 /*break*/, 5];
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.deleteSessionsCallback(ids)];
+                    case 2: return [2 /*return*/, _a.sent()];
+                    case 3:
+                        error_4 = _a.sent();
+                        throw new ShopifyErrors.SessionStorageError("CustomSessionStorage failed to delete array of sessions. Error Details: ".concat(error_4));
+                    case 4: return [3 /*break*/, 6];
+                    case 5:
+                        console.warn("CustomSessionStorage failed to delete array of sessions. Error Details: deleteSessionsCallback not defined.");
+                        _a.label = 6;
+                    case 6: return [2 /*return*/, false];
+                }
+            });
+        });
+    };
+    CustomSessionStorage.prototype.findSessionsByShop = function (shop) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var sessions, error_5;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        sessions = [];
+                        if (!this.findSessionsByShopCallback) return [3 /*break*/, 5];
+                        _a.label = 1;
+                    case 1:
+                        _a.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, this.findSessionsByShopCallback(shop)];
+                    case 2:
+                        sessions = _a.sent();
+                        return [3 /*break*/, 4];
+                    case 3:
+                        error_5 = _a.sent();
+                        throw new ShopifyErrors.SessionStorageError("CustomSessionStorage failed to find sessions by shop. Error Details: ".concat(error_5));
+                    case 4: return [3 /*break*/, 6];
+                    case 5:
+                        console.warn("CustomSessionStorage failed to find sessions by shop. Error Details: findSessionsByShopCallback not defined.");
+                        _a.label = 6;
+                    case 6: return [2 /*return*/, sessions];
+                }
+            });
+        });
+    };
     return CustomSessionStorage;
 }());
 exports.CustomSessionStorage = CustomSessionStorage;

package/dist/auth/session/storage/memory.d.ts

@@ -5,5 +5,7 @@ export declare class MemorySessionStorage implements SessionStorage {
     storeSession(session: SessionInterface): Promise<boolean>;
     loadSession(id: string): Promise<SessionInterface | undefined>;
     deleteSession(id: string): Promise<boolean>;
+    deleteSessions(ids: string[]): Promise<boolean>;
+    findSessionsByShop(shop: string): Promise<SessionInterface[]>;
 }
 //# sourceMappingURL=memory.d.ts.map

package/dist/auth/session/storage/memory.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/storage/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAElD,qBAAa,oBAAqB,YAAW,cAAc;IACzD,OAAO,CAAC,QAAQ,CAAwC;IAE3C,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAI9D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;CAMzD"}
+{"version":3,"file":"memory.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/storage/memory.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAElD,qBAAa,oBAAqB,YAAW,cAAc;IACzD,OAAO,CAAC,QAAQ,CAAwC;IAE3C,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAKzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAI9D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAO3C,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAK/C,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;CAM3E"}

package/dist/auth/session/storage/memory.js

@@ -31,6 +31,24 @@ var MemorySessionStorage = /** @class */ (function () {
             });
         });
     };
+    MemorySessionStorage.prototype.deleteSessions = function (ids) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var _this = this;
+            return tslib_1.__generator(this, function (_a) {
+                ids.forEach(function (id) { return delete _this.sessions[id]; });
+                return [2 /*return*/, true];
+            });
+        });
+    };
+    MemorySessionStorage.prototype.findSessionsByShop = function (shop) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var results;
+            return tslib_1.__generator(this, function (_a) {
+                results = Object.values(this.sessions).filter(function (session) { return session.shop === shop; });
+                return [2 /*return*/, results];
+            });
+        });
+    };
     return MemorySessionStorage;
 }());
 exports.MemorySessionStorage = MemorySessionStorage;