@shopify/shopify-api 4.1.0 → 5.0.1

package/dist/auth/session/storage/redis.js

@@ -4,6 +4,7 @@ exports.RedisSessionStorage = void 0;
 var tslib_1 = require("tslib");
 var redis_1 = require("redis");
 var session_utils_1 = require("../session-utils");
+var shop_validator_1 = require("../../../utils/shop-validator");
 var defaultRedisSessionStorageOptions = {
     sessionKeyPrefix: 'shopify_sessions',
 };
@@ -69,6 +70,72 @@ var RedisSessionStorage = /** @class */ (function () {
             });
         });
     };
+    RedisSessionStorage.prototype.deleteSessions = function (ids) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var _this = this;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.ready];
+                    case 1:
+                        _a.sent();
+                        return [4 /*yield*/, this.client.del(ids.map(function (id) { return _this.fullKey(id); }))];
+                    case 2:
+                        _a.sent();
+                        return [2 /*return*/, true];
+                }
+            });
+        });
+    };
+    RedisSessionStorage.prototype.findSessionsByShop = function (shop) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var cleanShop, keys, results, keys_1, keys_1_1, key, rawResult, session, e_1_1;
+            var e_1, _a;
+            return tslib_1.__generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0: return [4 /*yield*/, this.ready];
+                    case 1:
+                        _b.sent();
+                        cleanShop = (0, shop_validator_1.sanitizeShop)(shop, true);
+                        return [4 /*yield*/, this.client.keys('*')];
+                    case 2:
+                        keys = _b.sent();
+                        results = [];
+                        _b.label = 3;
+                    case 3:
+                        _b.trys.push([3, 8, 9, 10]);
+                        keys_1 = tslib_1.__values(keys), keys_1_1 = keys_1.next();
+                        _b.label = 4;
+                    case 4:
+                        if (!!keys_1_1.done) return [3 /*break*/, 7];
+                        key = keys_1_1.value;
+                        return [4 /*yield*/, this.client.get(key)];
+                    case 5:
+                        rawResult = _b.sent();
+                        if (!rawResult)
+                            return [3 /*break*/, 6];
+                        session = (0, session_utils_1.sessionFromEntries)(JSON.parse(rawResult));
+                        if (session.shop === cleanShop)
+                            results.push(session);
+                        _b.label = 6;
+                    case 6:
+                        keys_1_1 = keys_1.next();
+                        return [3 /*break*/, 4];
+                    case 7: return [3 /*break*/, 10];
+                    case 8:
+                        e_1_1 = _b.sent();
+                        e_1 = { error: e_1_1 };
+                        return [3 /*break*/, 10];
+                    case 9:
+                        try {
+                            if (keys_1_1 && !keys_1_1.done && (_a = keys_1.return)) _a.call(keys_1);
+                        }
+                        finally { if (e_1) throw e_1.error; }
+                        return [7 /*endfinally*/];
+                    case 10: return [2 /*return*/, results];
+                }
+            });
+        });
+    };
     RedisSessionStorage.prototype.disconnect = function () {
         return tslib_1.__awaiter(this, void 0, void 0, function () {
             return tslib_1.__generator(this, function (_a) {
@@ -89,9 +156,7 @@ var RedisSessionStorage = /** @class */ (function () {
             return tslib_1.__generator(this, function (_a) {
                 switch (_a.label) {
                     case 0:
-                        this.client = (0, redis_1.createClient)({
-                            url: this.dbUrl.toString(),
-                        });
+                        this.client = (0, redis_1.createClient)(tslib_1.__assign(tslib_1.__assign({}, this.options), { url: this.dbUrl.toString() }));
                         return [4 /*yield*/, this.client.connect()];
                     case 1:
                         _a.sent();

package/dist/auth/session/storage/sqlite.d.ts

@@ -12,6 +12,8 @@ export declare class SQLiteSessionStorage implements SessionStorage {
     storeSession(session: SessionInterface): Promise<boolean>;
     loadSession(id: string): Promise<SessionInterface | undefined>;
     deleteSession(id: string): Promise<boolean>;
+    deleteSessions(ids: string[]): Promise<boolean>;
+    findSessionsByShop(shop: string): Promise<SessionInterface[]>;
     private hasSessionTable;
     private init;
     private query;

package/dist/auth/session/storage/sqlite.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/storage/sqlite.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAGlD,MAAM,WAAW,2BAA2B;IAC1C,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAKD,qBAAa,oBAAqB,YAAW,cAAc;IAMvD,OAAO,CAAC,QAAQ;IALlB,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,EAAE,CAAmB;IAC7B,OAAO,CAAC,KAAK,CAAgB;gBAGnB,QAAQ,EAAE,MAAM,EACxB,IAAI,GAAE,OAAO,CAAC,2BAA2B,CAAM;IAOpC,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAa9D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;YAU1C,eAAe;YAWf,IAAI;IAmBlB,OAAO,CAAC,KAAK;CAWd"}
+{"version":3,"file":"sqlite.d.ts","sourceRoot":"","sources":["../../../../src/auth/session/storage/sqlite.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,gBAAgB,EAAC,MAAM,UAAU,CAAC;AAC1C,OAAO,EAAC,cAAc,EAAC,MAAM,oBAAoB,CAAC;AAIlD,MAAM,WAAW,2BAA2B;IAC1C,gBAAgB,EAAE,MAAM,CAAC;CAC1B;AAKD,qBAAa,oBAAqB,YAAW,cAAc;IAMvD,OAAO,CAAC,QAAQ;IALlB,OAAO,CAAC,OAAO,CAA8B;IAC7C,OAAO,CAAC,EAAE,CAAmB;IAC7B,OAAO,CAAC,KAAK,CAAgB;gBAGnB,QAAQ,EAAE,MAAM,EACxB,IAAI,GAAE,OAAO,CAAC,2BAA2B,CAAM;IAOpC,YAAY,CAAC,OAAO,EAAE,gBAAgB,GAAG,OAAO,CAAC,OAAO,CAAC;IAkBzD,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,GAAG,SAAS,CAAC;IAa9D,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC;IAU3C,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,OAAO,CAAC;IAU/C,kBAAkB,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC;YAiB5D,eAAe;YAWf,IAAI;IAmBlB,OAAO,CAAC,KAAK;CAWd"}

package/dist/auth/session/storage/sqlite.js

@@ -4,6 +4,7 @@ exports.SQLiteSessionStorage = void 0;
 var tslib_1 = require("tslib");
 var sqlite3_1 = tslib_1.__importDefault(require("sqlite3"));
 var session_utils_1 = require("../session-utils");
+var shop_validator_1 = require("../../../utils/shop-validator");
 var defaultSQLiteSessionStorageOptions = {
     sessionTableName: 'shopify_sessions',
 };
@@ -76,6 +77,47 @@ var SQLiteSessionStorage = /** @class */ (function () {
             });
         });
     };
+    SQLiteSessionStorage.prototype.deleteSessions = function (ids) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var query;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0: return [4 /*yield*/, this.ready];
+                    case 1:
+                        _a.sent();
+                        query = "\n      DELETE FROM ".concat(this.options.sessionTableName, "\n      WHERE id IN (").concat(ids.map(function () { return '?'; }).join(','), ");\n    ");
+                        return [4 /*yield*/, this.query(query, ids)];
+                    case 2:
+                        _a.sent();
+                        return [2 /*return*/, true];
+                }
+            });
+        });
+    };
+    SQLiteSessionStorage.prototype.findSessionsByShop = function (shop) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var cleanShop, query, rows, results;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        cleanShop = (0, shop_validator_1.sanitizeShop)(shop, true);
+                        return [4 /*yield*/, this.ready];
+                    case 1:
+                        _a.sent();
+                        query = "\n      SELECT * FROM ".concat(this.options.sessionTableName, "\n      WHERE shop = ?;\n    ");
+                        return [4 /*yield*/, this.query(query, [cleanShop])];
+                    case 2:
+                        rows = _a.sent();
+                        if (!Array.isArray(rows) || (rows === null || rows === void 0 ? void 0 : rows.length) === 0)
+                            return [2 /*return*/, []];
+                        results = rows.map(function (row) {
+                            return (0, session_utils_1.sessionFromEntries)(Object.entries(row));
+                        });
+                        return [2 /*return*/, results];
+                }
+            });
+        });
+    };
     SQLiteSessionStorage.prototype.hasSessionTable = function () {
         return tslib_1.__awaiter(this, void 0, void 0, function () {
             var query, rows;

package/dist/base-types.d.ts

@@ -13,6 +13,7 @@ export interface ContextParams {
     LOG_FILE?: string;
     USER_AGENT_PREFIX?: string;
     PRIVATE_APP_STOREFRONT_ACCESS_TOKEN?: string;
+    CUSTOM_SHOP_DOMAINS?: (RegExp | string)[];
 }
 export declare enum ApiVersion {
     October21 = "2021-10",

package/dist/base-types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"base-types.d.ts","sourceRoot":"","sources":["../src/base-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,eAAe,CAAC;AACzC,OAAO,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mCAAmC,CAAC,EAAE,MAAM,CAAC;CAC9C;AAED,oBAAY,UAAU;IACpB,SAAS,YAAY;IACrB,SAAS,YAAY;IACrB,OAAO,YAAY;IACnB,MAAM,YAAY;IAClB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAEpD,oBAAY,aAAa;IACvB,WAAW,2BAA2B;IACtC,qBAAqB,sCAAsC;IAC3D,IAAI,0BAA0B;IAC9B,KAAK,oBAAoB;IACzB,MAAM,0BAA0B;CACjC"}
+{"version":3,"file":"base-types.d.ts","sourceRoot":"","sources":["../src/base-types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,eAAe,CAAC;AACzC,OAAO,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AAE9D,MAAM,WAAW,aAAa;IAC5B,OAAO,EAAE,MAAM,CAAC;IAChB,cAAc,EAAE,MAAM,CAAC;IACvB,MAAM,EAAE,MAAM,EAAE,GAAG,UAAU,CAAC;IAC9B,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,WAAW,EAAE,UAAU,CAAC;IACxB,eAAe,EAAE,OAAO,CAAC;IACzB,cAAc,CAAC,EAAE,OAAO,CAAC;IACzB,eAAe,CAAC,EAAE,cAAc,CAAC;IACjC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,mCAAmC,CAAC,EAAE,MAAM,CAAC;IAC7C,mBAAmB,CAAC,EAAE,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,CAAC;CAC3C;AAED,oBAAY,UAAU;IACpB,SAAS,YAAY;IACrB,SAAS,YAAY;IACrB,OAAO,YAAY;IACnB,MAAM,YAAY;IAClB,QAAQ,aAAa;CACtB;AAED,eAAO,MAAM,kBAAkB,oBAAoB,CAAC;AAEpD,oBAAY,aAAa;IACvB,WAAW,2BAA2B;IACtC,qBAAqB,sCAAsC;IAC3D,IAAI,0BAA0B;IAC9B,KAAK,oBAAoB;IACzB,MAAM,0BAA0B;CACjC"}

package/dist/clients/graphql/graphql_client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"graphql_client.d.ts","sourceRoot":"","sources":["../../../src/clients/graphql/graphql_client.ts"],"names":[],"mappings":"AAIA,OAAO,EAAW,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAG7D,OAAO,EAAC,aAAa,EAAC,MAAM,SAAS,CAAC;AAEtC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,aAAa;IAKZ,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,WAAW,CAAC;IAJ1D,SAAS,CAAC,WAAW,SAAgB;IAErC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAEf,MAAM,EAAE,MAAM,EAAW,WAAW,CAAC,oBAAQ;IAU5D,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAwB1D,SAAS,CAAC,oBAAoB,IAAI,iBAAiB;CAQpD"}
+{"version":3,"file":"graphql_client.d.ts","sourceRoot":"","sources":["../../../src/clients/graphql/graphql_client.ts"],"names":[],"mappings":"AAGA,OAAO,EAAW,aAAa,EAAC,MAAM,sBAAsB,CAAC;AAG7D,OAAO,EAAC,aAAa,EAAC,MAAM,SAAS,CAAC;AAEtC,MAAM,WAAW,iBAAiB;IAChC,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;CACf;AAED,qBAAa,aAAa;IAKZ,QAAQ,CAAC,MAAM,EAAE,MAAM;IAAE,QAAQ,CAAC,WAAW,CAAC;IAJ1D,SAAS,CAAC,WAAW,SAAgB;IAErC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAa;gBAEf,MAAM,EAAE,MAAM,EAAW,WAAW,CAAC,oBAAQ;IAU5D,KAAK,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IAgC1D,SAAS,CAAC,oBAAoB,IAAI,iBAAiB;CAQpD"}

package/dist/clients/graphql/graphql_client.js

@@ -2,7 +2,6 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.GraphqlClient = void 0;
 var tslib_1 = require("tslib");
-var error_1 = require("../../error");
 var context_1 = require("../../context");
 var base_types_1 = require("../../base-types");
 var http_client_1 = require("../http_client/http_client");
@@ -20,22 +19,34 @@ var GraphqlClient = /** @class */ (function () {
     }
     GraphqlClient.prototype.query = function (params) {
         return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var accessTokenHeader, path, dataType;
+            var accessTokenHeader, path, dataType, result;
             var _a;
             return tslib_1.__generator(this, function (_b) {
-                if (params.data.length === 0) {
-                    throw new error_1.MissingRequiredArgument('Query missing.');
+                switch (_b.label) {
+                    case 0:
+                        if (params.data.length === 0) {
+                            throw new ShopifyErrors.MissingRequiredArgument('Query missing.');
+                        }
+                        accessTokenHeader = this.getAccessTokenHeader();
+                        params.extraHeaders = tslib_1.__assign((_a = {}, _a[accessTokenHeader.header] = accessTokenHeader.value, _a), params.extraHeaders);
+                        path = "".concat(this.baseApiPath, "/").concat(context_1.Context.API_VERSION, "/graphql.json");
+                        if (typeof params.data === 'object') {
+                            dataType = types_1.DataType.JSON;
+                        }
+                        else {
+                            dataType = types_1.DataType.GraphQL;
+                        }
+                        return [4 /*yield*/, this.client.post(tslib_1.__assign({ path: path, type: dataType }, params))];
+                    case 1:
+                        result = _b.sent();
+                        if (result.body.errors) {
+                            throw new ShopifyErrors.GraphqlQueryError({
+                                message: 'GraphQL query returned errors',
+                                response: result.body,
+                            });
+                        }
+                        return [2 /*return*/, result];
                 }
-                accessTokenHeader = this.getAccessTokenHeader();
-                params.extraHeaders = tslib_1.__assign((_a = {}, _a[accessTokenHeader.header] = accessTokenHeader.value, _a), params.extraHeaders);
-                path = "".concat(this.baseApiPath, "/").concat(context_1.Context.API_VERSION, "/graphql.json");
-                if (typeof params.data === 'object') {
-                    dataType = types_1.DataType.JSON;
-                }
-                else {
-                    dataType = types_1.DataType.GraphQL;
-                }
-                return [2 /*return*/, this.client.post(tslib_1.__assign({ path: path, type: dataType }, params))];
             });
         });
     };

package/dist/clients/http_client/http_client.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"http_client.d.ts","sourceRoot":"","sources":["../../../src/clients/http_client/http_client.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACd,MAAM,SAAS,CAAC;AAEjB,qBAAa,UAAU;IAOF,OAAO,CAAC,MAAM;IALjC,MAAM,CAAC,QAAQ,CAAC,eAAe,QAAQ;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,UAAU;IACjD,OAAO,CAAC,mBAAmB,CAA+B;gBAE/B,MAAM,EAAE,MAAM;IAIzC;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAIlE;;OAEG;IACU,IAAI,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpE;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAIlE;;OAEG;IACU,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;cAIxD,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IA0GtE,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;YAIhC,SAAS;CA6GxB"}
+{"version":3,"file":"http_client.d.ts","sourceRoot":"","sources":["../../../src/clients/http_client/http_client.ts"],"names":[],"mappings":"AAYA,OAAO,EAEL,mBAAmB,EACnB,gBAAgB,EAChB,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,aAAa,EACd,MAAM,SAAS,CAAC;AAQjB,qBAAa,UAAU;IAOF,OAAO,CAAC,MAAM;IALjC,MAAM,CAAC,QAAQ,CAAC,eAAe,QAAQ;IAEvC,MAAM,CAAC,QAAQ,CAAC,uBAAuB,UAAU;IACjD,OAAO,CAAC,mBAAmB,CAA+B;gBAE/B,MAAM,EAAE,MAAM;IAIzC;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAIlE;;OAEG;IACU,IAAI,CAAC,MAAM,EAAE,iBAAiB,GAAG,OAAO,CAAC,aAAa,CAAC;IAIpE;;OAEG;IACU,GAAG,CAAC,MAAM,EAAE,gBAAgB,GAAG,OAAO,CAAC,aAAa,CAAC;IAIlE;;OAEG;IACU,MAAM,CAAC,MAAM,EAAE,mBAAmB,GAAG,OAAO,CAAC,aAAa,CAAC;cAIxD,OAAO,CAAC,MAAM,EAAE,aAAa,GAAG,OAAO,CAAC,aAAa,CAAC;IA0GtE,SAAS,CAAC,cAAc,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM;YAIhC,SAAS;CAqHxB"}

package/dist/clients/http_client/http_client.js

@@ -107,7 +107,7 @@ var HttpClient = /** @class */ (function () {
                                         body = data;
                                         break;
                                 }
-                                headers = tslib_1.__assign({ 'Content-Type': type, 'Content-Length': Buffer.byteLength(body) }, params.extraHeaders);
+                                headers = tslib_1.__assign(tslib_1.__assign({}, headers), { 'Content-Type': type, 'Content-Length': Buffer.byteLength(body) });
                             }
                         }
                         url = "https://".concat(this.domain).concat(this.getRequestPath(params.path)).concat(processed_query_1.default.stringify(params.query));
@@ -180,6 +180,10 @@ var HttpClient = /** @class */ (function () {
                                     message: response.headers.get('X-Shopify-API-Deprecated-Reason'),
                                     path: url,
                                 };
+                                if (options.body) {
+                                    // This can only be a string, since we're always converting the body before calling this method
+                                    deprecation.body = "".concat(options.body.substring(0, 100), "...");
+                                }
                                 depHash = crypto_1.default
                                     .createHash('md5')
                                     .update(JSON.stringify(deprecation))

package/dist/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAa,aAAa,EAAC,MAAM,cAAc,CAAC;AACvD,OAAO,EAAC,UAAU,EAAC,MAAM,eAAe,CAAC;AAEzC,UAAU,gBAAiB,SAAQ,aAAa;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC;IAEnB;;;;OAIG;IACH,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAExC;;OAEG;IACH,oBAAoB,IAAI,IAAI,GAAG,KAAK,CAAC;IAErC;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;CAClD;AAOD,QAAA,MAAM,OAAO,EAAE,gBAqFd,CAAC;AAEF,OAAO,EAAC,OAAO,EAAE,gBAAgB,EAAC,CAAC"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../src/context.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,cAAc,EAAC,MAAM,gCAAgC,CAAC;AAE9D,OAAO,EAAa,aAAa,EAAC,MAAM,cAAc,CAAC;AACvD,OAAO,EAAC,UAAU,EAAC,MAAM,eAAe,CAAC;AAEzC,UAAU,gBAAiB,SAAQ,aAAa;IAC9C,WAAW,EAAE,MAAM,CAAC;IACpB,eAAe,EAAE,cAAc,CAAC;IAChC,MAAM,EAAE,UAAU,CAAC;IAEnB;;;;OAIG;IACH,UAAU,CAAC,MAAM,EAAE,aAAa,GAAG,IAAI,CAAC;IAExC;;OAEG;IACH,oBAAoB,IAAI,IAAI,GAAG,KAAK,CAAC;IAErC;;OAEG;IACH,iBAAiB,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,GAAG,KAAK,CAAC;CAClD;AAOD,QAAA,MAAM,OAAO,EAAE,gBAyFd,CAAC;AAEF,OAAO,EAAC,OAAO,EAAE,gBAAgB,EAAC,CAAC"}

package/dist/context.js

@@ -68,6 +68,9 @@ var Context = {
             this.PRIVATE_APP_STOREFRONT_ACCESS_TOKEN =
                 params.PRIVATE_APP_STOREFRONT_ACCESS_TOKEN;
         }
+        if (params.CUSTOM_SHOP_DOMAINS) {
+            this.CUSTOM_SHOP_DOMAINS = params.CUSTOM_SHOP_DOMAINS;
+        }
     },
     throwIfUninitialized: function () {
         if (!this.API_KEY || this.API_KEY.length === 0) {

package/dist/error.d.ts

@@ -5,6 +5,8 @@ export declare class InvalidHmacError extends ShopifyError {
 }
 export declare class InvalidShopError extends ShopifyError {
 }
+export declare class InvalidHostError extends ShopifyError {
+}
 export declare class InvalidJwtError extends ShopifyError {
 }
 export declare class MissingJwtTokenError extends ShopifyError {
@@ -52,6 +54,17 @@ export declare class HttpThrottlingError extends HttpRetriableError {
 }
 export declare class RestResourceError extends ShopifyError {
 }
+export declare class GraphqlQueryError extends ShopifyError {
+    readonly response: {
+        [key: string]: unknown;
+    };
+    constructor({ message, response, }: {
+        message: string;
+        response: {
+            [key: string]: unknown;
+        };
+    });
+}
 export declare class InvalidOAuthError extends ShopifyError {
 }
 export declare class SessionNotFound extends ShopifyError {

package/dist/error.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,qBAAa,YAAa,SAAQ,KAAK;gBACzB,GAAG,IAAI,EAAE,GAAG;CAIzB;AAED,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,eAAgB,SAAQ,YAAY;CAAG;AACpD,qBAAa,oBAAqB,SAAQ,YAAY;CAAG;AAEzD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,yBAA0B,SAAQ,YAAY;CAAG;AAC9D,qBAAa,eAAgB,SAAQ,YAAY;CAAG;AAEpD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,mBAAoB,SAAQ,YAAY;CAAG;AAExD,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,CAAC;IAChC,OAAO,CAAC,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,CAAC;CACpC;AACD,UAAU,uBAAwB,SAAQ,gBAAgB;IACxD,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,qBAAa,iBAAkB,SAAQ,YAAY;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBAEjB,EACjB,OAAO,EACP,IAAI,EACJ,UAAU,EACV,IAAI,EACJ,OAAO,GACR,EAAE,uBAAuB;CAS3B;AACD,qBAAa,kBAAmB,SAAQ,iBAAiB;CAAG;AAC5D,qBAAa,iBAAkB,SAAQ,kBAAkB;CAAG;AAE5D,UAAU,uBAAwB,SAAQ,gBAAgB;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,UAAU,yBAA0B,SAAQ,uBAAuB;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,qBAAa,mBAAoB,SAAQ,kBAAkB;IACzD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;gBAExB,EAAC,UAAU,EAAE,GAAG,MAAM,EAAC,EAAE,yBAAyB;CAItE;AAED,qBAAa,iBAAkB,SAAQ,YAAY;CAAG;AAEtD,qBAAa,iBAAkB,SAAQ,YAAY;CAAG;AACtD,qBAAa,eAAgB,SAAQ,YAAY;CAAG;AACpD,qBAAa,cAAe,SAAQ,YAAY;CAAG;AACnD,qBAAa,cAAe,SAAQ,YAAY;CAAG;AAEnD,qBAAa,mBAAoB,SAAQ,YAAY;CAAG;AACxD,qBAAa,mBAAoB,SAAQ,YAAY;CAAG;AAExD,qBAAa,uBAAwB,SAAQ,YAAY;CAAG;AAC5D,qBAAa,qBAAsB,SAAQ,YAAY;CAAG;AAE1D,qBAAa,mBAAoB,SAAQ,YAAY;CAAG"}
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../src/error.ts"],"names":[],"mappings":"AAAA,qBAAa,YAAa,SAAQ,KAAK;gBACzB,GAAG,IAAI,EAAE,GAAG;CAIzB;AAED,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,eAAgB,SAAQ,YAAY;CAAG;AACpD,qBAAa,oBAAqB,SAAQ,YAAY;CAAG;AAEzD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,yBAA0B,SAAQ,YAAY;CAAG;AAC9D,qBAAa,eAAgB,SAAQ,YAAY;CAAG;AAEpD,qBAAa,gBAAiB,SAAQ,YAAY;CAAG;AACrD,qBAAa,mBAAoB,SAAQ,YAAY;CAAG;AAExD,UAAU,gBAAgB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,CAAC,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,CAAC;IAChC,OAAO,CAAC,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,CAAC;CACpC;AACD,UAAU,uBAAwB,SAAQ,gBAAgB;IACxD,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,qBAAa,iBAAkB,SAAQ,YAAY;IACjD,QAAQ,CAAC,QAAQ,EAAE,gBAAgB,CAAC;gBAEjB,EACjB,OAAO,EACP,IAAI,EACJ,UAAU,EACV,IAAI,EACJ,OAAO,GACR,EAAE,uBAAuB;CAS3B;AACD,qBAAa,kBAAmB,SAAQ,iBAAiB;CAAG;AAC5D,qBAAa,iBAAkB,SAAQ,kBAAkB;CAAG;AAE5D,UAAU,uBAAwB,SAAQ,gBAAgB;IACxD,UAAU,CAAC,EAAE,MAAM,CAAC;CACrB;AACD,UAAU,yBAA0B,SAAQ,uBAAuB;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB;AACD,qBAAa,mBAAoB,SAAQ,kBAAkB;IACzD,QAAQ,CAAC,QAAQ,EAAE,uBAAuB,CAAC;gBAExB,EAAC,UAAU,EAAE,GAAG,MAAM,EAAC,EAAE,yBAAyB;CAItE;AAED,qBAAa,iBAAkB,SAAQ,YAAY;CAAG;AACtD,qBAAa,iBAAkB,SAAQ,YAAY;IACjD,QAAQ,CAAC,QAAQ,EAAE;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;KAAC,CAAC;gBAEzB,EACjB,OAAO,EACP,QAAQ,GACT,EAAE;QACD,OAAO,EAAE,MAAM,CAAC;QAChB,QAAQ,EAAE;YAAC,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAA;SAAC,CAAC;KACpC;CAIF;AAED,qBAAa,iBAAkB,SAAQ,YAAY;CAAG;AACtD,qBAAa,eAAgB,SAAQ,YAAY;CAAG;AACpD,qBAAa,cAAe,SAAQ,YAAY;CAAG;AACnD,qBAAa,cAAe,SAAQ,YAAY;CAAG;AAEnD,qBAAa,mBAAoB,SAAQ,YAAY;CAAG;AACxD,qBAAa,mBAAoB,SAAQ,YAAY;CAAG;AAExD,qBAAa,uBAAwB,SAAQ,YAAY;CAAG;AAC5D,qBAAa,qBAAsB,SAAQ,YAAY;CAAG;AAE1D,qBAAa,mBAAoB,SAAQ,YAAY;CAAG"}

package/dist/error.js

@@ -1,6 +1,6 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.InvalidRequestError = exports.UnsupportedClientType = exports.MissingRequiredArgument = exports.SessionStorageError = exports.InvalidWebhookError = exports.InvalidSession = exports.CookieNotFound = exports.SessionNotFound = exports.InvalidOAuthError = exports.RestResourceError = exports.HttpThrottlingError = exports.HttpInternalError = exports.HttpRetriableError = exports.HttpResponseError = exports.HttpMaxRetriesError = exports.HttpRequestError = exports.PrivateAppError = exports.UninitializedContextError = exports.SafeCompareError = exports.MissingJwtTokenError = exports.InvalidJwtError = exports.InvalidShopError = exports.InvalidHmacError = exports.ShopifyError = void 0;
+exports.InvalidRequestError = exports.UnsupportedClientType = exports.MissingRequiredArgument = exports.SessionStorageError = exports.InvalidWebhookError = exports.InvalidSession = exports.CookieNotFound = exports.SessionNotFound = exports.InvalidOAuthError = exports.GraphqlQueryError = exports.RestResourceError = exports.HttpThrottlingError = exports.HttpInternalError = exports.HttpRetriableError = exports.HttpResponseError = exports.HttpMaxRetriesError = exports.HttpRequestError = exports.PrivateAppError = exports.UninitializedContextError = exports.SafeCompareError = exports.MissingJwtTokenError = exports.InvalidJwtError = exports.InvalidHostError = exports.InvalidShopError = exports.InvalidHmacError = exports.ShopifyError = void 0;
 var tslib_1 = require("tslib");
 var ShopifyError = /** @class */ (function (_super) {
     tslib_1.__extends(ShopifyError, _super);
@@ -33,6 +33,14 @@ var InvalidShopError = /** @class */ (function (_super) {
     return InvalidShopError;
 }(ShopifyError));
 exports.InvalidShopError = InvalidShopError;
+var InvalidHostError = /** @class */ (function (_super) {
+    tslib_1.__extends(InvalidHostError, _super);
+    function InvalidHostError() {
+        return _super !== null && _super.apply(this, arguments) || this;
+    }
+    return InvalidHostError;
+}(ShopifyError));
+exports.InvalidHostError = InvalidHostError;
 var InvalidJwtError = /** @class */ (function (_super) {
     tslib_1.__extends(InvalidJwtError, _super);
     function InvalidJwtError() {
@@ -141,6 +149,17 @@ var RestResourceError = /** @class */ (function (_super) {
     return RestResourceError;
 }(ShopifyError));
 exports.RestResourceError = RestResourceError;
+var GraphqlQueryError = /** @class */ (function (_super) {
+    tslib_1.__extends(GraphqlQueryError, _super);
+    function GraphqlQueryError(_a) {
+        var message = _a.message, response = _a.response;
+        var _this = _super.call(this, message) || this;
+        _this.response = response;
+        return _this;
+    }
+    return GraphqlQueryError;
+}(ShopifyError));
+exports.GraphqlQueryError = GraphqlQueryError;
 var InvalidOAuthError = /** @class */ (function (_super) {
     tslib_1.__extends(InvalidOAuthError, _super);
     function InvalidOAuthError() {

package/dist/index.d.ts

@@ -37,7 +37,8 @@ export declare const Shopify: {
         safeCompare: typeof import("./utils/safe-compare").default;
         storeSession: typeof import("./utils/store-session").default;
         validateHmac: typeof import("./utils/hmac-validator").default;
-        validateShop: typeof import("./utils/shop-validator").default;
+        sanitizeShop: typeof import("./utils/shop-validator").sanitizeShop;
+        sanitizeHost: typeof import("./utils/shop-validator").sanitizeHost;
         versionCompatible: typeof import("./utils/version-compatible").default;
         withSession: typeof import("./utils/with-session").default;
         getEmbeddedAppUrl: typeof import("./utils/get-embedded-app-url").default;

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,aAAa,MAAM,SAAS,CAAC;AAOzC,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQnB,CAAC;AAEF,eAAe,OAAO,CAAC;AACvB,cAAc,SAAS,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,KAAK,aAAa,MAAM,SAAS,CAAC;AAOzC,eAAO,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CAQnB,CAAC;AAEF,eAAe,OAAO,CAAC;AACvB,cAAc,SAAS,CAAC"}

package/dist/utils/delete-offline-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"delete-offline-session.d.ts","sourceRoot":"","sources":["../../src/utils/delete-offline-session.ts"],"names":[],"mappings":"AAGA;;;;GAIG;AACH,wBAA8B,oBAAoB,CAChD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAMlB"}
+{"version":3,"file":"delete-offline-session.d.ts","sourceRoot":"","sources":["../../src/utils/delete-offline-session.ts"],"names":[],"mappings":"AAKA;;;;GAIG;AACH,wBAA8B,oBAAoB,CAChD,IAAI,EAAE,MAAM,GACX,OAAO,CAAC,OAAO,CAAC,CAOlB"}

package/dist/utils/delete-offline-session.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 var tslib_1 = require("tslib");
 var context_1 = require("../context");
 var oauth_1 = tslib_1.__importDefault(require("../auth/oauth"));
+var shop_validator_1 = require("./shop-validator");
 /**
  * Helper method to find and delete offline sessions by shop url.
  *
@@ -10,10 +11,11 @@ var oauth_1 = tslib_1.__importDefault(require("../auth/oauth"));
  */
 function deleteOfflineSession(shop) {
     return tslib_1.__awaiter(this, void 0, void 0, function () {
-        var sessionId;
+        var cleanShop, sessionId;
         return tslib_1.__generator(this, function (_a) {
             context_1.Context.throwIfUninitialized();
-            sessionId = oauth_1.default.getOfflineSessionId(shop);
+            cleanShop = (0, shop_validator_1.sanitizeShop)(shop, true);
+            sessionId = oauth_1.default.getOfflineSessionId(cleanShop);
             return [2 /*return*/, context_1.Context.SESSION_STORAGE.deleteSession(sessionId)];
         });
     });

package/dist/utils/get-embedded-app-url.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"get-embedded-app-url.d.ts","sourceRoot":"","sources":["../../src/utils/get-embedded-app-url.ts"],"names":[],"mappings":";AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAKxB;;;;GAIG;AACH,MAAM,CAAC,OAAO,UAAU,iBAAiB,CACvC,OAAO,EAAE,IAAI,CAAC,eAAe,GAC5B,MAAM,CAyBR"}
+{"version":3,"file":"get-embedded-app-url.d.ts","sourceRoot":"","sources":["../../src/utils/get-embedded-app-url.ts"],"names":[],"mappings":";AAAA,OAAO,IAAI,MAAM,MAAM,CAAC;AAOxB;;;;GAIG;AACH,MAAM,CAAC,OAAO,UAAU,iBAAiB,CACvC,OAAO,EAAE,IAAI,CAAC,eAAe,GAC5B,MAAM,CAyBR"}

package/dist/utils/get-embedded-app-url.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 var tslib_1 = require("tslib");
 var ShopifyErrors = tslib_1.__importStar(require("../error"));
 var context_1 = require("../context");
+var shop_validator_1 = require("./shop-validator");
 /**
  * Helper method to get the host URL for the app.
  *
@@ -17,7 +18,7 @@ function getEmbeddedAppUrl(request) {
     }
     var url = new URL(request.url, "https://".concat(request.headers.host));
     var host = url.searchParams.get('host');
-    if (typeof host !== 'string') {
+    if (typeof host !== 'string' || !(0, shop_validator_1.sanitizeHost)(host)) {
         throw new ShopifyErrors.InvalidRequestError('Request does not contain a host query parameter');
     }
     var decodedHost = Buffer.from(host, 'base64').toString();

package/dist/utils/index.d.ts

@@ -8,7 +8,7 @@ import graphqlProxy from './graphql_proxy';
 import safeCompare from './safe-compare';
 import storeSession from './store-session';
 import validateHmac from './hmac-validator';
-import validateShop from './shop-validator';
+import { sanitizeShop, sanitizeHost } from './shop-validator';
 import versionCompatible from './version-compatible';
 import withSession from './with-session';
 import getEmbeddedAppUrl from './get-embedded-app-url';
@@ -23,7 +23,8 @@ declare const ShopifyUtils: {
     safeCompare: typeof safeCompare;
     storeSession: typeof storeSession;
     validateHmac: typeof validateHmac;
-    validateShop: typeof validateShop;
+    sanitizeShop: typeof sanitizeShop;
+    sanitizeHost: typeof sanitizeHost;
     versionCompatible: typeof versionCompatible;
     withSession: typeof withSession;
     getEmbeddedAppUrl: typeof getEmbeddedAppUrl;

package/dist/utils/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AACxD,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAC5D,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAC5D,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AACxD,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,MAAM,SAAS,CAAC;AAC5B,OAAO,YAAY,MAAM,iBAAiB,CAAC;AAC3C,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,YAAY,MAAM,iBAAiB,CAAC;AAC3C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,iBAAiB,MAAM,sBAAsB,CAAC;AACrD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,iBAAiB,MAAM,wBAAwB,CAAC;AAEvD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;CAejB,CAAC;AAEF,eAAe,YAAY,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":"AAAA,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AACxD,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAC5D,OAAO,oBAAoB,MAAM,0BAA0B,CAAC;AAC5D,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AACxD,OAAO,kBAAkB,MAAM,wBAAwB,CAAC;AACxD,OAAO,KAAK,MAAM,SAAS,CAAC;AAC5B,OAAO,YAAY,MAAM,iBAAiB,CAAC;AAC3C,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,YAAY,MAAM,iBAAiB,CAAC;AAC3C,OAAO,YAAY,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAC,YAAY,EAAE,YAAY,EAAC,MAAM,kBAAkB,CAAC;AAC5D,OAAO,iBAAiB,MAAM,sBAAsB,CAAC;AACrD,OAAO,WAAW,MAAM,gBAAgB,CAAC;AACzC,OAAO,iBAAiB,MAAM,wBAAwB,CAAC;AAEvD,QAAA,MAAM,YAAY;;;;;;;;;;;;;;;;CAgBjB,CAAC;AAEF,eAAe,YAAY,CAAC"}

package/dist/utils/index.js

@@ -11,7 +11,7 @@ var graphql_proxy_1 = tslib_1.__importDefault(require("./graphql_proxy"));
 var safe_compare_1 = tslib_1.__importDefault(require("./safe-compare"));
 var store_session_1 = tslib_1.__importDefault(require("./store-session"));
 var hmac_validator_1 = tslib_1.__importDefault(require("./hmac-validator"));
-var shop_validator_1 = tslib_1.__importDefault(require("./shop-validator"));
+var shop_validator_1 = require("./shop-validator");
 var version_compatible_1 = tslib_1.__importDefault(require("./version-compatible"));
 var with_session_1 = tslib_1.__importDefault(require("./with-session"));
 var get_embedded_app_url_1 = tslib_1.__importDefault(require("./get-embedded-app-url"));
@@ -26,7 +26,8 @@ var ShopifyUtils = {
     safeCompare: safe_compare_1.default,
     storeSession: store_session_1.default,
     validateHmac: hmac_validator_1.default,
-    validateShop: shop_validator_1.default,
+    sanitizeShop: shop_validator_1.sanitizeShop,
+    sanitizeHost: shop_validator_1.sanitizeHost,
     versionCompatible: version_compatible_1.default,
     withSession: with_session_1.default,
     getEmbeddedAppUrl: get_embedded_app_url_1.default,

package/dist/utils/load-offline-session.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"load-offline-session.d.ts","sourceRoot":"","sources":["../../src/utils/load-offline-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,yBAAyB,CAAC;AAIhD;;;;;;;GAOG;AACH,wBAA8B,kBAAkB,CAC9C,IAAI,EAAE,MAAM,EACZ,cAAc,UAAQ,GACrB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAkB9B"}
+{"version":3,"file":"load-offline-session.d.ts","sourceRoot":"","sources":["../../src/utils/load-offline-session.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,yBAAyB,CAAC;AAMhD;;;;;;;GAOG;AACH,wBAA8B,kBAAkB,CAC9C,IAAI,EAAE,MAAM,EACZ,cAAc,UAAQ,GACrB,OAAO,CAAC,OAAO,GAAG,SAAS,CAAC,CAmB9B"}

package/dist/utils/load-offline-session.js

@@ -3,6 +3,7 @@ Object.defineProperty(exports, "__esModule", { value: true });
 var tslib_1 = require("tslib");
 var context_1 = require("../context");
 var oauth_1 = tslib_1.__importDefault(require("../auth/oauth"));
+var shop_validator_1 = require("./shop-validator");
 /**
  * Helper method for quickly loading offline sessions by shop url.
  * By default, returns undefined if there is no session, or the session found is expired.
@@ -14,12 +15,13 @@ var oauth_1 = tslib_1.__importDefault(require("../auth/oauth"));
 function loadOfflineSession(shop, includeExpired) {
     if (includeExpired === void 0) { includeExpired = false; }
     return tslib_1.__awaiter(this, void 0, void 0, function () {
-        var sessionId, session, now;
+        var cleanShop, sessionId, session, now;
         return tslib_1.__generator(this, function (_a) {
             switch (_a.label) {
                 case 0:
                     context_1.Context.throwIfUninitialized();
-                    sessionId = oauth_1.default.getOfflineSessionId(shop);
+                    cleanShop = (0, shop_validator_1.sanitizeShop)(shop, true);
+                    sessionId = oauth_1.default.getOfflineSessionId(cleanShop);
                     return [4 /*yield*/, context_1.Context.SESSION_STORAGE.loadSession(sessionId)];
                 case 1:
                     session = _a.sent();

package/dist/utils/setup-jest.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"setup-jest.d.ts","sourceRoot":"","sources":["../../src/utils/setup-jest.ts"],"names":[],"mappings":"AAsCA,OAAO,CAAC,MAAM,CAAC;IAEb,UAAU,IAAI,CAAC;QAEb,UAAU,QAAQ,CAAC,CAAC;YAClB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC;YAC7D,sBAAsB,IAAI,CAAC,CAAC;SAC7B;KAEF;CACF"}
+{"version":3,"file":"setup-jest.d.ts","sourceRoot":"","sources":["../../src/utils/setup-jest.ts"],"names":[],"mappings":"AAuCA,OAAO,CAAC,MAAM,CAAC;IAEb,UAAU,IAAI,CAAC;QAEb,UAAU,QAAQ,CAAC,CAAC;YAClB,mBAAmB,CAAC,WAAW,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,GAAG,CAAC,CAAC;YAC7D,sBAAsB,IAAI,CAAC,CAAC;SAC7B;KAEF;CACF"}

package/dist/utils/setup-jest.js

@@ -19,6 +19,7 @@ beforeEach(function () {
         IS_EMBEDDED_APP: false,
         IS_PRIVATE_APP: false,
         SESSION_STORAGE: new session_1.MemorySessionStorage(),
+        CUSTOM_SHOP_DOMAINS: undefined,
     });
     jest_fetch_mock_1.default.mockReset();
     currentCall = 0;

package/dist/utils/shop-validator.d.ts

@@ -1,7 +1,16 @@
 /**
- * Validates myshopify.com urls
+ * Validates and sanitizes shop domain urls. If Context.CUSTOM_SHOP_DOMAINS is set, shops ending in those domains are
+ * allowed. Accepts myshopify.com and myshopify.io by default.
  *
- * @param shop Shop url: {shop}.myshopify.com
+ * @param shop Shop url: {shop}.{domain}
+ * @param throwOnInvalid Whether to raise an exception if the shop is invalid
  */
-export default function validateShop(shop: string): boolean;
+export declare function sanitizeShop(shop: string, throwOnInvalid?: boolean): string | null;
+/**
+ * Validates and sanitizes Shopify host arguments.
+ *
+ * @param host Host address
+ * @param throwOnInvalid Whether to raise an exception if the host is invalid
+ */
+export declare function sanitizeHost(host: string, throwOnInvalid?: boolean): string | null;
 //# sourceMappingURL=shop-validator.d.ts.map

package/dist/utils/shop-validator.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"shop-validator.d.ts","sourceRoot":"","sources":["../../src/utils/shop-validator.ts"],"names":[],"mappings":"AAAA;;;;GAIG;AACH,MAAM,CAAC,OAAO,UAAU,YAAY,CAAC,IAAI,EAAE,MAAM,GAAG,OAAO,CAM1D"}
+{"version":3,"file":"shop-validator.d.ts","sourceRoot":"","sources":["../../src/utils/shop-validator.ts"],"names":[],"mappings":"AAGA;;;;;;GAMG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,cAAc,UAAQ,GACrB,MAAM,GAAG,IAAI,CAoBf;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAC1B,IAAI,EAAE,MAAM,EACZ,cAAc,UAAQ,GACrB,MAAM,GAAG,IAAI,CASf"}

package/dist/utils/shop-validator.js

@@ -1,13 +1,45 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.sanitizeHost = exports.sanitizeShop = void 0;
+var tslib_1 = require("tslib");
+var error_1 = require("../error");
+var context_1 = require("../context");
 /**
- * Validates myshopify.com urls
+ * Validates and sanitizes shop domain urls. If Context.CUSTOM_SHOP_DOMAINS is set, shops ending in those domains are
+ * allowed. Accepts myshopify.com and myshopify.io by default.
  *
- * @param shop Shop url: {shop}.myshopify.com
+ * @param shop Shop url: {shop}.{domain}
+ * @param throwOnInvalid Whether to raise an exception if the shop is invalid
  */
-function validateShop(shop) {
-    console.warn('Deprecation notice: validateShop will be removed in the next major release.');
-    var shopUrlRegex = /^[a-zA-Z0-9][a-zA-Z0-9-]*\.myshopify\.(com|io)[/]*$/;
-    return shopUrlRegex.test(shop);
+function sanitizeShop(shop, throwOnInvalid) {
+    if (throwOnInvalid === void 0) { throwOnInvalid = false; }
+    var domainsRegex = ['myshopify\\.com', 'myshopify\\.io'];
+    if (context_1.Context.CUSTOM_SHOP_DOMAINS) {
+        domainsRegex.push.apply(domainsRegex, tslib_1.__spreadArray([], tslib_1.__read(context_1.Context.CUSTOM_SHOP_DOMAINS.map(function (regex) {
+            return typeof regex === 'string' ? regex : regex.source;
+        })), false));
+    }
+    var shopUrlRegex = new RegExp("^[a-zA-Z0-9][a-zA-Z0-9-_]*\\.(".concat(domainsRegex.join('|'), ")[/]*$"));
+    var sanitizedShop = shopUrlRegex.test(shop) ? shop : null;
+    if (!sanitizedShop && throwOnInvalid) {
+        throw new error_1.InvalidShopError('Received invalid shop argument');
+    }
+    return sanitizedShop;
 }
-exports.default = validateShop;
+exports.sanitizeShop = sanitizeShop;
+/**
+ * Validates and sanitizes Shopify host arguments.
+ *
+ * @param host Host address
+ * @param throwOnInvalid Whether to raise an exception if the host is invalid
+ */
+function sanitizeHost(host, throwOnInvalid) {
+    if (throwOnInvalid === void 0) { throwOnInvalid = false; }
+    var base64regex = /^[0-9a-zA-Z+/]+={0,2}$/;
+    var sanitizedHost = base64regex.test(host) ? host : null;
+    if (!sanitizedHost && throwOnInvalid) {
+        throw new error_1.InvalidHostError('Received invalid host argument');
+    }
+    return sanitizedHost;
+}
+exports.sanitizeHost = sanitizeHost;

package/dist/version.d.ts

@@ -1,2 +1,2 @@
-export declare const SHOPIFY_API_LIBRARY_VERSION = "4.1.0";
+export declare const SHOPIFY_API_LIBRARY_VERSION = "5.0.1";
 //# sourceMappingURL=version.d.ts.map

package/dist/version.js

@@ -1,4 +1,4 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.SHOPIFY_API_LIBRARY_VERSION = void 0;
-exports.SHOPIFY_API_LIBRARY_VERSION = '4.1.0';
+exports.SHOPIFY_API_LIBRARY_VERSION = '5.0.1';