@shopify/shopify-api 5.2.0 → 6.0.0-rc10

package/adapters/mock/mock_test_requests.d.ts

@@ -0,0 +1,15 @@
+import { NormalizedRequest, NormalizedResponse } from '../../runtime/http';
+declare type RequestListEntry = NormalizedRequest;
+declare type ResponseListEntry = NormalizedResponse | Error;
+interface MockedAdapter {
+    requestList: RequestListEntry[];
+    responseList: ResponseListEntry[];
+    queueResponse: (response: NormalizedResponse) => void;
+    queueError: (error: Error) => void;
+    getRequest: () => RequestListEntry | undefined;
+    getResponses: () => ResponseListEntry[];
+    reset: () => void;
+}
+export declare const mockTestRequests: MockedAdapter;
+export {};
+//# sourceMappingURL=mock_test_requests.d.ts.map

package/adapters/mock/mock_test_requests.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock_test_requests.d.ts","sourceRoot":"","sources":["mock_test_requests.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,iBAAiB,EAAE,kBAAkB,EAAC,MAAM,oBAAoB,CAAC;AAEzE,aAAK,gBAAgB,GAAG,iBAAiB,CAAC;AAC1C,aAAK,iBAAiB,GAAG,kBAAkB,GAAG,KAAK,CAAC;AAEpD,UAAU,aAAa;IACrB,WAAW,EAAE,gBAAgB,EAAE,CAAC;IAChC,YAAY,EAAE,iBAAiB,EAAE,CAAC;IAClC,aAAa,EAAE,CAAC,QAAQ,EAAE,kBAAkB,KAAK,IAAI,CAAC;IACtD,UAAU,EAAE,CAAC,KAAK,EAAE,KAAK,KAAK,IAAI,CAAC;IACnC,UAAU,EAAE,MAAM,gBAAgB,GAAG,SAAS,CAAC;IAC/C,YAAY,EAAE,MAAM,iBAAiB,EAAE,CAAC;IACxC,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,eAAO,MAAM,gBAAgB,EAAE,aAwB9B,CAAC"}

package/adapters/mock/mock_test_requests.js

@@ -0,0 +1,24 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.mockTestRequests = void 0;
+exports.mockTestRequests = {
+    requestList: [],
+    responseList: [],
+    queueResponse: function (response) {
+        this.responseList.push(response);
+    },
+    queueError: function (error) {
+        this.responseList.push(error);
+    },
+    getRequest: function () {
+        return this.requestList.shift();
+    },
+    getResponses: function () {
+        return this.responseList;
+    },
+    reset: function () {
+        this.requestList = [];
+        this.responseList = [];
+    },
+};
+//# sourceMappingURL=mock_test_requests.js.map

package/adapters/mock/mock_test_requests.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock_test_requests.js","sourceRoot":"","sources":["mock_test_requests.ts"],"names":[],"mappings":";;;AAea,QAAA,gBAAgB,GAAkB;IAC7C,WAAW,EAAE,EAAE;IACf,YAAY,EAAE,EAAE;IAEhB,aAAa,EAAb,UAAc,QAA4B;QACxC,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACnC,CAAC;IAED,UAAU,EAAV,UAAW,KAAY;QACrB,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAChC,CAAC;IAED,UAAU,EAAV;QACE,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;IAClC,CAAC;IAED,YAAY,EAAZ;QACE,OAAO,IAAI,CAAC,YAAY,CAAC;IAC3B,CAAC;IAED,KAAK;QACH,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;QACtB,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;IACzB,CAAC;CACF,CAAC"}

package/adapters/node/adapter.d.ts

@@ -0,0 +1,14 @@
+/// <reference types="node" />
+import type { IncomingMessage, ServerResponse } from 'http';
+import { AdapterArgs, Headers, NormalizedRequest, NormalizedResponse } from '../../runtime/http';
+interface NodeAdapterArgs extends AdapterArgs {
+    rawRequest: IncomingMessage;
+    rawResponse: ServerResponse;
+}
+export declare function nodeConvertRequest(adapterArgs: NodeAdapterArgs): Promise<NormalizedRequest>;
+export declare function nodeConvertAndSendResponse(response: NormalizedResponse, adapterArgs: NodeAdapterArgs): Promise<void>;
+export declare function nodeConvertAndSetHeaders(headers: Headers, adapterArgs: NodeAdapterArgs): Promise<void>;
+export declare function nodeFetch({ url, method, headers, body, }: NormalizedRequest): Promise<NormalizedResponse>;
+export declare function nodeRuntimeString(): string;
+export {};
+//# sourceMappingURL=adapter.d.ts.map

package/adapters/node/adapter.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["adapter.ts"],"names":[],"mappings":";AAAA,OAAO,KAAK,EAAC,eAAe,EAAE,cAAc,EAAC,MAAM,MAAM,CAAC;AAI1D,OAAO,EACL,WAAW,EAGX,OAAO,EACP,iBAAiB,EACjB,kBAAkB,EACnB,MAAM,oBAAoB,CAAC;AAE5B,UAAU,eAAgB,SAAQ,WAAW;IAC3C,UAAU,EAAE,eAAe,CAAC;IAC5B,WAAW,EAAE,cAAc,CAAC;CAC7B;AAED,wBAAsB,kBAAkB,CACtC,WAAW,EAAE,eAAe,GAC3B,OAAO,CAAC,iBAAiB,CAAC,CAS5B;AAED,wBAAsB,0BAA0B,CAC9C,QAAQ,EAAE,kBAAkB,EAC5B,WAAW,EAAE,eAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CAef;AAED,wBAAsB,wBAAwB,CAC5C,OAAO,EAAE,OAAO,EAChB,WAAW,EAAE,eAAe,GAC3B,OAAO,CAAC,IAAI,CAAC,CAMf;AAED,wBAAsB,SAAS,CAAC,EAC9B,GAAG,EACH,MAAM,EACN,OAAY,EACZ,IAAI,GACL,EAAE,iBAAiB,GAAG,OAAO,CAAC,kBAAkB,CAAC,CASjD;AAED,wBAAgB,iBAAiB,WAEhC"}

package/adapters/node/adapter.js

@@ -0,0 +1,89 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nodeRuntimeString = exports.nodeFetch = exports.nodeConvertAndSetHeaders = exports.nodeConvertAndSendResponse = exports.nodeConvertRequest = void 0;
+var tslib_1 = require("tslib");
+var node_fetch_1 = tslib_1.__importDefault(require("node-fetch"));
+var http_1 = require("../../runtime/http");
+function nodeConvertRequest(adapterArgs) {
+    var _a;
+    return tslib_1.__awaiter(this, void 0, void 0, function () {
+        var req;
+        return tslib_1.__generator(this, function (_b) {
+            req = adapterArgs.rawRequest;
+            return [2 /*return*/, {
+                    headers: (0, http_1.canonicalizeHeaders)(tslib_1.__assign({}, req.headers)),
+                    method: (_a = req.method) !== null && _a !== void 0 ? _a : 'GET',
+                    // Express.js overrides the url property, so we want to use originalUrl for it
+                    url: req.originalUrl || req.url,
+                }];
+        });
+    });
+}
+exports.nodeConvertRequest = nodeConvertRequest;
+function nodeConvertAndSendResponse(response, adapterArgs) {
+    return tslib_1.__awaiter(this, void 0, void 0, function () {
+        var res;
+        return tslib_1.__generator(this, function (_a) {
+            switch (_a.label) {
+                case 0:
+                    res = adapterArgs.rawResponse;
+                    if (!response.headers) return [3 /*break*/, 2];
+                    return [4 /*yield*/, nodeConvertAndSetHeaders(response.headers, adapterArgs)];
+                case 1:
+                    _a.sent();
+                    _a.label = 2;
+                case 2:
+                    if (response.body) {
+                        res.write(response.body);
+                    }
+                    res.statusCode = response.statusCode;
+                    res.statusMessage = response.statusText;
+                    res.end();
+                    return [2 /*return*/];
+            }
+        });
+    });
+}
+exports.nodeConvertAndSendResponse = nodeConvertAndSendResponse;
+function nodeConvertAndSetHeaders(headers, adapterArgs) {
+    return tslib_1.__awaiter(this, void 0, void 0, function () {
+        var res;
+        return tslib_1.__generator(this, function (_a) {
+            res = adapterArgs.rawResponse;
+            Object.entries(headers).forEach(function (_a) {
+                var _b = tslib_1.__read(_a, 2), header = _b[0], value = _b[1];
+                return res.setHeader(header, value);
+            });
+            return [2 /*return*/];
+        });
+    });
+}
+exports.nodeConvertAndSetHeaders = nodeConvertAndSetHeaders;
+function nodeFetch(_a) {
+    var url = _a.url, method = _a.method, _b = _a.headers, headers = _b === void 0 ? {} : _b, body = _a.body;
+    return tslib_1.__awaiter(this, void 0, void 0, function () {
+        var resp, respBody;
+        return tslib_1.__generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, (0, node_fetch_1.default)(url, { method: method, headers: (0, http_1.flatHeaders)(headers), body: body })];
+                case 1:
+                    resp = _c.sent();
+                    return [4 /*yield*/, resp.text()];
+                case 2:
+                    respBody = _c.sent();
+                    return [2 /*return*/, {
+                            statusCode: resp.status,
+                            statusText: resp.statusText,
+                            body: respBody,
+                            headers: (0, http_1.canonicalizeHeaders)(Object.fromEntries(resp.headers.entries())),
+                        }];
+            }
+        });
+    });
+}
+exports.nodeFetch = nodeFetch;
+function nodeRuntimeString() {
+    return "Node ".concat(process.version);
+}
+exports.nodeRuntimeString = nodeRuntimeString;
+//# sourceMappingURL=adapter.js.map

package/adapters/node/adapter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["adapter.ts"],"names":[],"mappings":";;;;AAEA,kEAA+B;AAE/B,2CAO4B;AAO5B,SAAsB,kBAAkB,CACtC,WAA4B;;;;;YAEtB,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC;YAEnC,sBAAO;oBACL,OAAO,EAAE,IAAA,0BAAmB,EAAC,qBAAI,GAAG,CAAC,OAAO,CAAQ,CAAC;oBACrD,MAAM,EAAE,MAAA,GAAG,CAAC,MAAM,mCAAI,KAAK;oBAC3B,8EAA8E;oBAC9E,GAAG,EAAG,GAAW,CAAC,WAAW,IAAI,GAAG,CAAC,GAAI;iBAC1C,EAAC;;;CACH;AAXD,gDAWC;AAED,SAAsB,0BAA0B,CAC9C,QAA4B,EAC5B,WAA4B;;;;;;oBAEtB,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC;yBAEhC,QAAQ,CAAC,OAAO,EAAhB,wBAAgB;oBAClB,qBAAM,wBAAwB,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,EAAA;;oBAA7D,SAA6D,CAAC;;;oBAGhE,IAAI,QAAQ,CAAC,IAAI,EAAE;wBACjB,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;qBAC1B;oBAED,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;oBACrC,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC;oBAExC,GAAG,CAAC,GAAG,EAAE,CAAC;;;;;CACX;AAlBD,gEAkBC;AAED,SAAsB,wBAAwB,CAC5C,OAAgB,EAChB,WAA4B;;;;YAEtB,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC;YAEpC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,UAAC,EAAe;oBAAf,KAAA,qBAAe,EAAd,MAAM,QAAA,EAAE,KAAK,QAAA;gBAC7C,OAAA,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC;YAA5B,CAA4B,CAC7B,CAAC;;;;CACH;AATD,4DASC;AAED,SAAsB,SAAS,CAAC,EAKZ;QAJlB,GAAG,SAAA,EACH,MAAM,YAAA,EACN,eAAY,EAAZ,OAAO,mBAAG,EAAE,KAAA,EACZ,IAAI,UAAA;;;;;wBAES,qBAAM,IAAA,oBAAK,EAAC,GAAG,EAAE,EAAC,MAAM,QAAA,EAAE,OAAO,EAAE,IAAA,kBAAW,EAAC,OAAO,CAAC,EAAE,IAAI,MAAA,EAAC,CAAC,EAAA;;oBAAtE,IAAI,GAAG,SAA+D;oBAC3D,qBAAM,IAAI,CAAC,IAAI,EAAE,EAAA;;oBAA5B,QAAQ,GAAG,SAAiB;oBAClC,sBAAO;4BACL,UAAU,EAAE,IAAI,CAAC,MAAM;4BACvB,UAAU,EAAE,IAAI,CAAC,UAAU;4BAC3B,IAAI,EAAE,QAAQ;4BACd,OAAO,EAAE,IAAA,0BAAmB,EAAC,MAAM,CAAC,WAAW,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC,CAAC;yBACzE,EAAC;;;;CACH;AAdD,8BAcC;AAED,SAAgB,iBAAiB;IAC/B,OAAO,eAAQ,OAAO,CAAC,OAAO,CAAE,CAAC;AACnC,CAAC;AAFD,8CAEC"}

package/adapters/node/index.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=index.d.ts.map

package/adapters/node/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":""}

package/adapters/node/index.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var tslib_1 = require("tslib");
+var crypto_1 = tslib_1.__importDefault(require("crypto"));
+var runtime_1 = require("../../runtime");
+var adapter_1 = require("./adapter");
+(0, runtime_1.setAbstractFetchFunc)(adapter_1.nodeFetch);
+(0, runtime_1.setAbstractConvertRequestFunc)(adapter_1.nodeConvertRequest);
+(0, runtime_1.setAbstractConvertResponseFunc)(adapter_1.nodeConvertAndSendResponse);
+(0, runtime_1.setAbstractConvertHeadersFunc)(adapter_1.nodeConvertAndSetHeaders);
+(0, runtime_1.setAbstractRuntimeString)(adapter_1.nodeRuntimeString);
+(0, runtime_1.setCrypto)(crypto_1.default);
+//# sourceMappingURL=index.js.map

package/adapters/node/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;AAAA,0DAA4B;AAE5B,yCAOuB;AAEvB,qCAMmB;AAEnB,IAAA,8BAAoB,EAAC,mBAAS,CAAC,CAAC;AAChC,IAAA,uCAA6B,EAAC,4BAAkB,CAAC,CAAC;AAClD,IAAA,wCAA8B,EAAC,oCAA0B,CAAC,CAAC;AAC3D,IAAA,uCAA6B,EAAC,kCAAwB,CAAC,CAAC;AACxD,IAAA,kCAAwB,EAAC,2BAAiB,CAAC,CAAC;AAC5C,IAAA,mBAAS,EAAC,gBAAa,CAAC,CAAC"}

package/lib/auth/get-embedded-app-url.d.ts

@@ -0,0 +1,5 @@
+import { ConfigInterface } from '../base-types';
+import { GetEmbeddedAppUrlParams } from './types';
+export declare function createGetEmbeddedAppUrl(config: ConfigInterface): ({ ...adapterArgs }: GetEmbeddedAppUrlParams) => Promise<string>;
+export declare function createBuildEmbeddedAppUrl(config: ConfigInterface): (host: string) => string;
+//# sourceMappingURL=get-embedded-app-url.d.ts.map

package/lib/auth/get-embedded-app-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-embedded-app-url.d.ts","sourceRoot":"","sources":["get-embedded-app-url.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAI9C,OAAO,EAAC,uBAAuB,EAAC,MAAM,SAAS,CAAC;AAEhD,wBAAgB,uBAAuB,CAAC,MAAM,EAAE,eAAe,wBAC7B,uBAAuB,KAAG,QAAQ,MAAM,CAAC,CA0B1E;AAED,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,eAAe,UACjD,MAAM,KAAG,MAAM,CAY9B"}

package/lib/auth/get-embedded-app-url.js

@@ -0,0 +1,47 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createBuildEmbeddedAppUrl = exports.createGetEmbeddedAppUrl = void 0;
+var tslib_1 = require("tslib");
+var ShopifyErrors = tslib_1.__importStar(require("../error"));
+var http_1 = require("../../runtime/http");
+var shop_validator_1 = require("../utils/shop-validator");
+function createGetEmbeddedAppUrl(config) {
+    var _this = this;
+    return function (_a) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var request, url, host;
+        var adapterArgs = tslib_1.__rest(_a, []);
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, http_1.abstractConvertRequest)(adapterArgs)];
+                case 1:
+                    request = _b.sent();
+                    if (!request) {
+                        throw new ShopifyErrors.MissingRequiredArgument('getEmbeddedAppUrl requires a request object argument');
+                    }
+                    if (!request.url) {
+                        throw new ShopifyErrors.InvalidRequestError('Request does not contain a URL');
+                    }
+                    url = new URL(request.url, "https://".concat(request.headers.host));
+                    host = url.searchParams.get('host');
+                    if (typeof host !== 'string') {
+                        throw new ShopifyErrors.InvalidRequestError('Request does not contain a host query parameter');
+                    }
+                    return [2 /*return*/, createBuildEmbeddedAppUrl(config)(host)];
+            }
+        });
+    }); };
+}
+exports.createGetEmbeddedAppUrl = createGetEmbeddedAppUrl;
+function createBuildEmbeddedAppUrl(config) {
+    return function (host) {
+        (0, shop_validator_1.createSanitizeHost)(config)(host, true);
+        // eslint-disable-next-line no-warning-comments
+        // TODO Remove the Buffer.from call when dropping Node 14 support
+        var decodedHost = typeof atob === 'undefined'
+            ? Buffer.from(host, 'base64').toString()
+            : atob(host);
+        return "https://".concat(decodedHost, "/apps/").concat(config.apiKey);
+    };
+}
+exports.createBuildEmbeddedAppUrl = createBuildEmbeddedAppUrl;
+//# sourceMappingURL=get-embedded-app-url.js.map

package/lib/auth/get-embedded-app-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-embedded-app-url.js","sourceRoot":"","sources":["get-embedded-app-url.ts"],"names":[],"mappings":";;;;AAAA,8DAA0C;AAE1C,2CAA0D;AAC1D,0DAA2D;AAI3D,SAAgB,uBAAuB,CAAC,MAAuB;IAA/D,iBA2BC;IA1BC,OAAO,UAAO,EAAyC;;YAArC,WAAW,sBAAf,EAAgB,CAAD;;;wBACX,qBAAM,IAAA,6BAAsB,EAAC,WAAW,CAAC,EAAA;;oBAAnD,OAAO,GAAG,SAAyC;oBAEzD,IAAI,CAAC,OAAO,EAAE;wBACZ,MAAM,IAAI,aAAa,CAAC,uBAAuB,CAC7C,sDAAsD,CACvD,CAAC;qBACH;oBAED,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;wBAChB,MAAM,IAAI,aAAa,CAAC,mBAAmB,CACzC,gCAAgC,CACjC,CAAC;qBACH;oBAEK,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,kBAAW,OAAO,CAAC,OAAO,CAAC,IAAI,CAAE,CAAC,CAAC;oBAC9D,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;oBAE1C,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;wBAC5B,MAAM,IAAI,aAAa,CAAC,mBAAmB,CACzC,iDAAiD,CAClD,CAAC;qBACH;oBAED,sBAAO,yBAAyB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAC;;;SAChD,CAAC;AACJ,CAAC;AA3BD,0DA2BC;AAED,SAAgB,yBAAyB,CAAC,MAAuB;IAC/D,OAAO,UAAC,IAAY;QAClB,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QAEvC,+CAA+C;QAC/C,iEAAiE;QACjE,IAAM,WAAW,GACf,OAAO,IAAI,KAAK,WAAW;YACzB,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,QAAQ,EAAE;YACxC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAEjB,OAAO,kBAAW,WAAW,mBAAS,MAAM,CAAC,MAAM,CAAE,CAAC;IACxD,CAAC,CAAC;AACJ,CAAC;AAbD,8DAaC"}

package/lib/auth/index.d.ts

@@ -0,0 +1,13 @@
+import { ConfigInterface } from '../base-types';
+import { nonce } from './oauth/nonce';
+import { safeCompare } from './oauth/safe-compare';
+export declare function shopifyAuth(config: ConfigInterface): {
+    begin: ({ shop, callbackPath, isOnline, ...adapterArgs }: import("./types").BeginParams) => Promise<any>;
+    callback: <T = any>({ isOnline, ...adapterArgs }: import("./types").CallbackParams) => Promise<import("./oauth/oauth").CallbackResponse<T>>;
+    nonce: typeof nonce;
+    safeCompare: typeof safeCompare;
+    getEmbeddedAppUrl: ({ ...adapterArgs }: import("./types").GetEmbeddedAppUrlParams) => Promise<string>;
+    buildEmbeddedAppUrl: (host: string) => string;
+};
+export declare type ShopifyAuth = ReturnType<typeof shopifyAuth>;
+//# sourceMappingURL=index.d.ts.map

package/lib/auth/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAG9C,OAAO,EAAC,KAAK,EAAC,MAAM,eAAe,CAAC;AACpC,OAAO,EAAC,WAAW,EAAC,MAAM,sBAAsB,CAAC;AAMjD,wBAAgB,WAAW,CAAC,MAAM,EAAE,eAAe;;;;;;;EASlD;AAED,oBAAY,WAAW,GAAG,UAAU,CAAC,OAAO,WAAW,CAAC,CAAC"}

package/lib/auth/index.js

@@ -0,0 +1,19 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.shopifyAuth = void 0;
+var oauth_1 = require("./oauth/oauth");
+var nonce_1 = require("./oauth/nonce");
+var safe_compare_1 = require("./oauth/safe-compare");
+var get_embedded_app_url_1 = require("./get-embedded-app-url");
+function shopifyAuth(config) {
+    return {
+        begin: (0, oauth_1.createBegin)(config),
+        callback: (0, oauth_1.createCallback)(config),
+        nonce: nonce_1.nonce,
+        safeCompare: safe_compare_1.safeCompare,
+        getEmbeddedAppUrl: (0, get_embedded_app_url_1.createGetEmbeddedAppUrl)(config),
+        buildEmbeddedAppUrl: (0, get_embedded_app_url_1.createBuildEmbeddedAppUrl)(config),
+    };
+}
+exports.shopifyAuth = shopifyAuth;
+//# sourceMappingURL=index.js.map

package/lib/auth/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["index.ts"],"names":[],"mappings":";;;AAEA,uCAA0D;AAC1D,uCAAoC;AACpC,qDAAiD;AACjD,+DAGgC;AAEhC,SAAgB,WAAW,CAAC,MAAuB;IACjD,OAAO;QACL,KAAK,EAAE,IAAA,mBAAW,EAAC,MAAM,CAAC;QAC1B,QAAQ,EAAE,IAAA,sBAAc,EAAC,MAAM,CAAC;QAChC,KAAK,eAAA;QACL,WAAW,4BAAA;QACX,iBAAiB,EAAE,IAAA,8CAAuB,EAAC,MAAM,CAAC;QAClD,mBAAmB,EAAE,IAAA,gDAAyB,EAAC,MAAM,CAAC;KACvD,CAAC;AACJ,CAAC;AATD,kCASC"}

package/lib/auth/oauth/nonce.d.ts

@@ -0,0 +1,2 @@
+export declare function nonce(): string;
+//# sourceMappingURL=nonce.d.ts.map

package/lib/auth/oauth/nonce.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.d.ts","sourceRoot":"","sources":["nonce.ts"],"names":[],"mappings":"AAEA,wBAAgB,KAAK,IAAI,MAAM,CAgB9B"}

package/lib/auth/oauth/nonce.js

@@ -0,0 +1,20 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.nonce = void 0;
+var crypto_1 = require("../../../runtime/crypto");
+function nonce() {
+    var length = 15;
+    // eslint-disable-next-line no-warning-comments
+    // TODO Remove the randomBytes call when dropping Node 14 support
+    var bytes = crypto_1.crypto.getRandomValues
+        ? crypto_1.crypto.getRandomValues(new Uint8Array(length))
+        : crypto_1.crypto.randomBytes(length);
+    var nonce = bytes
+        .map(function (byte) {
+        return byte % 10;
+    })
+        .join('');
+    return nonce;
+}
+exports.nonce = nonce;
+//# sourceMappingURL=nonce.js.map

package/lib/auth/oauth/nonce.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.js","sourceRoot":"","sources":["nonce.ts"],"names":[],"mappings":";;;AAAA,kDAA+C;AAE/C,SAAgB,KAAK;IACnB,IAAM,MAAM,GAAG,EAAE,CAAC;IAElB,+CAA+C;IAC/C,iEAAiE;IACjE,IAAM,KAAK,GAAG,eAAM,CAAC,eAAe;QAClC,CAAC,CAAC,eAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC;QAChD,CAAC,CAAE,eAAc,CAAC,WAAW,CAAC,MAAM,CAAC,CAAC;IAExC,IAAM,KAAK,GAAG,KAAK;SAChB,GAAG,CAAC,UAAC,IAAY;QAChB,OAAO,IAAI,GAAG,EAAE,CAAC;IACnB,CAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;IAEZ,OAAO,KAAK,CAAC;AACf,CAAC;AAhBD,sBAgBC"}

package/lib/auth/oauth/oauth.d.ts

@@ -0,0 +1,11 @@
+import { ConfigInterface } from '../../base-types';
+import { Session } from '../../session/session';
+import { AdapterResponse, AdapterHeaders } from '../../../runtime/http';
+import { BeginParams, CallbackParams } from './types';
+export interface CallbackResponse<T = AdapterHeaders> {
+    headers: T;
+    session: Session;
+}
+export declare function createBegin(config: ConfigInterface): ({ shop, callbackPath, isOnline, ...adapterArgs }: BeginParams) => Promise<AdapterResponse>;
+export declare function createCallback(config: ConfigInterface): <T = any>({ isOnline, ...adapterArgs }: CallbackParams) => Promise<CallbackResponse<T>>;
+//# sourceMappingURL=oauth.d.ts.map

package/lib/auth/oauth/oauth.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.d.ts","sourceRoot":"","sources":["oauth.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,eAAe,EAAC,MAAM,kBAAkB,CAAC;AAIjD,OAAO,EAAC,OAAO,EAAC,MAAM,uBAAuB,CAAC;AAO9C,OAAO,EAIL,eAAe,EACf,cAAc,EAGf,MAAM,uBAAuB,CAAC;AAG/B,OAAO,EAGL,WAAW,EACX,cAAc,EAKf,MAAM,SAAS,CAAC;AAIjB,MAAM,WAAW,gBAAgB,CAAC,CAAC,GAAG,cAAc;IAClD,OAAO,EAAE,CAAC,CAAC;IACX,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,wBAAgB,WAAW,CAAC,MAAM,EAAE,eAAe,sDAM9C,WAAW,KAAG,QAAQ,eAAe,CAAC,CAkD1C;AAED,wBAAgB,cAAc,CAAC,MAAM,EAAE,eAAe,2CAIjD,cAAc,kCA2FlB"}

package/lib/auth/oauth/oauth.js

@@ -0,0 +1,221 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.createCallback = exports.createBegin = void 0;
+var tslib_1 = require("tslib");
+var uuid_1 = require("uuid");
+var processed_query_1 = tslib_1.__importDefault(require("../../utils/processed-query"));
+var ShopifyErrors = tslib_1.__importStar(require("../../error"));
+var hmac_validator_1 = require("../../utils/hmac-validator");
+var shop_validator_1 = require("../../utils/shop-validator");
+var session_1 = require("../../session/session");
+var session_utils_1 = require("../../session/session-utils");
+var http_client_1 = require("../../clients/http_client/http_client");
+var types_1 = require("../../clients/http_client/types");
+var http_1 = require("../../../runtime/http");
+var logger_1 = require("../../logger");
+var types_2 = require("./types");
+var nonce_1 = require("./nonce");
+var safe_compare_1 = require("./safe-compare");
+function createBegin(config) {
+    var _this = this;
+    return function (_a) { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var log, cleanShop, request, cookies, state, query, processedQuery, redirectUrl, response;
+        var shop = _a.shop, callbackPath = _a.callbackPath, isOnline = _a.isOnline, adapterArgs = tslib_1.__rest(_a, ["shop", "callbackPath", "isOnline"]);
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0:
+                    throwIfPrivateApp(config.isPrivateApp, 'Cannot perform OAuth for private apps');
+                    log = (0, logger_1.logger)(config);
+                    log.info('Beginning OAuth', { shop: shop, isOnline: isOnline, callbackPath: callbackPath });
+                    cleanShop = (0, shop_validator_1.createSanitizeShop)(config)(shop, true);
+                    return [4 /*yield*/, (0, http_1.abstractConvertRequest)(adapterArgs)];
+                case 1:
+                    request = _b.sent();
+                    cookies = new http_1.Cookies(request, {}, {
+                        keys: [config.apiSecretKey],
+                        secure: true,
+                    });
+                    state = (0, nonce_1.nonce)();
+                    return [4 /*yield*/, cookies.setAndSign(types_2.STATE_COOKIE_NAME, state, {
+                            expires: new Date(Date.now() + 60000),
+                            sameSite: 'lax',
+                            secure: true,
+                            path: callbackPath,
+                        })];
+                case 2:
+                    _b.sent();
+                    query = {
+                        client_id: config.apiKey,
+                        scope: config.scopes.toString(),
+                        redirect_uri: "".concat(config.hostScheme, "://").concat(config.hostName).concat(callbackPath),
+                        state: state,
+                        'grant_options[]': isOnline ? 'per-user' : '',
+                    };
+                    processedQuery = new processed_query_1.default();
+                    processedQuery.putAll(query);
+                    redirectUrl = "https://".concat(cleanShop, "/admin/oauth/authorize").concat(processedQuery.stringify());
+                    response = {
+                        statusCode: 302,
+                        statusText: 'Found',
+                        headers: tslib_1.__assign(tslib_1.__assign({}, cookies.response.headers), { Location: redirectUrl }),
+                    };
+                    log.debug("OAuth started, redirecting to ".concat(redirectUrl), { shop: shop, isOnline: isOnline });
+                    return [2 /*return*/, (0, http_1.abstractConvertResponse)(response, adapterArgs)];
+            }
+        });
+    }); };
+}
+exports.createBegin = createBegin;
+function createCallback(config) {
+    return function callback(_a) {
+        var isOnline = _a.isOnline, adapterArgs = tslib_1.__rest(_a, ["isOnline"]);
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var request, query, shop, log, cookies, stateFromCookie, authQuery, body, postParams, cleanShop, HttpClient, client, postResponse, session;
+            var _b;
+            return tslib_1.__generator(this, function (_c) {
+                switch (_c.label) {
+                    case 0:
+                        throwIfPrivateApp(config.isPrivateApp, 'Cannot perform OAuth for private apps');
+                        return [4 /*yield*/, (0, http_1.abstractConvertRequest)(adapterArgs)];
+                    case 1:
+                        request = _c.sent();
+                        query = new URL(request.url, "".concat(config.hostScheme, "://").concat(config.hostName)).searchParams;
+                        shop = query.get('shop');
+                        log = (0, logger_1.logger)(config);
+                        log.info('Completing OAuth', { shop: shop, isOnline: isOnline });
+                        cookies = new http_1.Cookies(request, {}, {
+                            keys: [config.apiSecretKey],
+                            secure: true,
+                        });
+                        return [4 /*yield*/, cookies.getAndVerify(types_2.STATE_COOKIE_NAME)];
+                    case 2:
+                        stateFromCookie = _c.sent();
+                        cookies.deleteCookie(types_2.STATE_COOKIE_NAME);
+                        if (!stateFromCookie) {
+                            log.error('Could not find OAuth cookie', { shop: shop, isOnline: isOnline });
+                            throw new ShopifyErrors.CookieNotFound("Cannot complete OAuth process. Could not find an OAuth cookie for shop url: ".concat(shop));
+                        }
+                        authQuery = Object.fromEntries(query.entries());
+                        return [4 /*yield*/, validQuery({ config: config, query: authQuery, stateFromCookie: stateFromCookie })];
+                    case 3:
+                        if (!(_c.sent())) {
+                            log.error('Invalid OAuth callback', {
+                                shop: shop,
+                                isOnline: isOnline,
+                                stateFromCookie: stateFromCookie,
+                            });
+                            throw new ShopifyErrors.InvalidOAuthError('Invalid OAuth callback.');
+                        }
+                        log.debug('OAuth request is valid, requesting access token', {
+                            shop: shop,
+                            isOnline: isOnline,
+                        });
+                        body = {
+                            client_id: config.apiKey,
+                            client_secret: config.apiSecretKey,
+                            code: query.get('code'),
+                        };
+                        postParams = {
+                            path: '/admin/oauth/access_token',
+                            type: types_1.DataType.JSON,
+                            data: body,
+                        };
+                        cleanShop = (0, shop_validator_1.createSanitizeShop)(config)(query.get('shop'), true);
+                        HttpClient = (0, http_client_1.createHttpClientClass)(config);
+                        client = new HttpClient({ domain: cleanShop });
+                        return [4 /*yield*/, client.post(postParams)];
+                    case 4:
+                        postResponse = _c.sent();
+                        log.info('Received access token, creating session', { shop: shop, isOnline: isOnline });
+                        session = createSession({
+                            postResponse: postResponse,
+                            shop: cleanShop,
+                            stateFromCookie: stateFromCookie,
+                            isOnline: isOnline,
+                            config: config,
+                        });
+                        if (!!config.isEmbeddedApp) return [3 /*break*/, 6];
+                        return [4 /*yield*/, cookies.setAndSign(types_2.SESSION_COOKIE_NAME, session.id, {
+                                expires: session.expires,
+                                sameSite: 'lax',
+                                secure: true,
+                            })];
+                    case 5:
+                        _c.sent();
+                        _c.label = 6;
+                    case 6:
+                        _b = {};
+                        return [4 /*yield*/, (0, http_1.abstractConvertHeaders)(cookies.response.headers, adapterArgs)];
+                    case 7: return [2 /*return*/, (_b.headers = (_c.sent()),
+                            _b.session = session,
+                            _b)];
+                }
+            });
+        });
+    };
+}
+exports.createCallback = createCallback;
+function validQuery(_a) {
+    var config = _a.config, query = _a.query, stateFromCookie = _a.stateFromCookie;
+    return tslib_1.__awaiter(this, void 0, void 0, function () {
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, (0, hmac_validator_1.createValidateHmac)(config)(query)];
+                case 1: return [2 /*return*/, ((_b.sent()) &&
+                        (0, safe_compare_1.safeCompare)(query.state, stateFromCookie))];
+            }
+        });
+    });
+}
+function createSession(_a) {
+    var config = _a.config, postResponse = _a.postResponse, shop = _a.shop, stateFromCookie = _a.stateFromCookie, isOnline = _a.isOnline;
+    if (!isOnline &&
+        postResponse.body.associated_user) {
+        throw new ShopifyErrors.InvalidOAuthError('Attempted to complete offline OAuth flow, but received an online token response. This is likely because ' +
+            "you're not setting the isOnline parameter consistently between begin() and callback()");
+    }
+    if (isOnline &&
+        !postResponse.body.associated_user) {
+        throw new ShopifyErrors.InvalidOAuthError('Attempted to complete online OAuth flow, but received an offline token response. This is likely because ' +
+            "you're not setting the isOnline parameter consistently between begin() and callback()");
+    }
+    if (isOnline) {
+        var sessionId = void 0;
+        var responseBody = postResponse.body;
+        var access_token = responseBody.access_token, scope = responseBody.scope, rest = tslib_1.__rest(responseBody, ["access_token", "scope"]);
+        var sessionExpiration = new Date(Date.now() + responseBody.expires_in * 1000);
+        if (config.isEmbeddedApp) {
+            sessionId = (0, session_utils_1.createGetJwtSessionId)(config)(shop, "".concat(rest.associated_user.id));
+        }
+        else {
+            sessionId = (0, uuid_1.v4)();
+        }
+        return new session_1.Session({
+            id: sessionId,
+            shop: shop,
+            state: stateFromCookie,
+            isOnline: isOnline,
+            accessToken: access_token,
+            scope: scope,
+            expires: sessionExpiration,
+            onlineAccessInfo: rest,
+        });
+    }
+    else {
+        var responseBody = postResponse.body;
+        return new session_1.Session({
+            id: (0, session_utils_1.createGetOfflineId)(config)(shop),
+            shop: shop,
+            state: stateFromCookie,
+            isOnline: isOnline,
+            accessToken: responseBody.access_token,
+            scope: responseBody.scope,
+        });
+    }
+}
+function throwIfPrivateApp(isPrivateApp, message) {
+    if (isPrivateApp) {
+        throw new ShopifyErrors.PrivateAppError(message);
+    }
+}
+//# sourceMappingURL=oauth.js.map

package/lib/auth/oauth/oauth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.js","sourceRoot":"","sources":["oauth.ts"],"names":[],"mappings":";;;;AAAA,6BAAkC;AAElC,wFAAyD;AAEzD,iEAA6C;AAC7C,6DAA8D;AAC9D,6DAA8D;AAC9D,iDAA8C;AAC9C,6DAGqC;AACrC,qEAA4E;AAC5E,yDAAwE;AACxE,8CAQ+B;AAC/B,uCAAoC;AAEpC,iCASiB;AACjB,iCAA8B;AAC9B,+CAA2C;AAO3C,SAAgB,WAAW,CAAC,MAAuB;IAAnD,iBAwDC;IAvDC,OAAO,UAAO,EAKA;;QAJZ,IAAA,IAAI,UAAA,EACJ,YAAY,kBAAA,EACZ,QAAQ,cAAA,EACL,WAAW,sBAJF,oCAKb,CADe;;;;oBAEd,iBAAiB,CACf,MAAM,CAAC,YAAY,EACnB,uCAAuC,CACxC,CAAC;oBAEI,GAAG,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC;oBAC3B,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAC,IAAI,MAAA,EAAE,QAAQ,UAAA,EAAE,YAAY,cAAA,EAAC,CAAC,CAAC;oBAEtD,SAAS,GAAG,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAE,CAAC;oBAC1C,qBAAM,IAAA,6BAAsB,EAAC,WAAW,CAAC,EAAA;;oBAAnD,OAAO,GAAG,SAAyC;oBAEnD,OAAO,GAAG,IAAI,cAAO,CAAC,OAAO,EAAE,EAAwB,EAAE;wBAC7D,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;wBAC3B,MAAM,EAAE,IAAI;qBACb,CAAC,CAAC;oBAEG,KAAK,GAAG,IAAA,aAAK,GAAE,CAAC;oBAEtB,qBAAM,OAAO,CAAC,UAAU,CAAC,yBAAiB,EAAE,KAAK,EAAE;4BACjD,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;4BACrC,QAAQ,EAAE,KAAK;4BACf,MAAM,EAAE,IAAI;4BACZ,IAAI,EAAE,YAAY;yBACnB,CAAC,EAAA;;oBALF,SAKE,CAAC;oBAEG,KAAK,GAAG;wBACZ,SAAS,EAAE,MAAM,CAAC,MAAM;wBACxB,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE;wBAC/B,YAAY,EAAE,UAAG,MAAM,CAAC,UAAU,gBAAM,MAAM,CAAC,QAAQ,SAAG,YAAY,CAAE;wBACxE,KAAK,OAAA;wBACL,iBAAiB,EAAE,QAAQ,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;qBAC9C,CAAC;oBACI,cAAc,GAAG,IAAI,yBAAc,EAAE,CAAC;oBAC5C,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;oBAEvB,WAAW,GAAG,kBAAW,SAAS,mCAAyB,cAAc,CAAC,SAAS,EAAE,CAAE,CAAC;oBACxF,QAAQ,GAAuB;wBACnC,UAAU,EAAE,GAAG;wBACf,UAAU,EAAE,OAAO;wBACnB,OAAO,wCACF,OAAO,CAAC,QAAQ,CAAC,OAAQ,KAC5B,QAAQ,EAAE,WAAW,GACtB;qBACF,CAAC;oBAEF,GAAG,CAAC,KAAK,CAAC,wCAAiC,WAAW,CAAE,EAAE,EAAC,IAAI,MAAA,EAAE,QAAQ,UAAA,EAAC,CAAC,CAAC;oBAE5E,sBAAO,IAAA,8BAAuB,EAAC,QAAQ,EAAE,WAAW,CAAC,EAAC;;;SACvD,CAAC;AACJ,CAAC;AAxDD,kCAwDC;AAED,SAAgB,cAAc,CAAC,MAAuB;IACpD,OAAO,SAAe,QAAQ,CAAqB,EAGlC;QAFf,IAAA,QAAQ,cAAA,EACL,WAAW,sBAFmC,YAGlD,CADe;;;;;;;wBAEd,iBAAiB,CACf,MAAM,CAAC,YAAY,EACnB,uCAAuC,CACxC,CAAC;wBAEc,qBAAM,IAAA,6BAAsB,EAAC,WAAW,CAAC,EAAA;;wBAAnD,OAAO,GAAG,SAAyC;wBAEnD,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,GAAG,EACX,UAAG,MAAM,CAAC,UAAU,gBAAM,MAAM,CAAC,QAAQ,CAAE,CAC5C,CAAC,YAAY,CAAC;wBACT,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;wBAE1B,GAAG,GAAG,IAAA,eAAM,EAAC,MAAM,CAAC,CAAC;wBAC3B,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAC,IAAI,MAAA,EAAE,QAAQ,UAAA,EAAC,CAAC,CAAC;wBAEzC,OAAO,GAAG,IAAI,cAAO,CAAC,OAAO,EAAE,EAAwB,EAAE;4BAC7D,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;4BAC3B,MAAM,EAAE,IAAI;yBACb,CAAC,CAAC;wBAEqB,qBAAM,OAAO,CAAC,YAAY,CAAC,yBAAiB,CAAC,EAAA;;wBAA/D,eAAe,GAAG,SAA6C;wBACrE,OAAO,CAAC,YAAY,CAAC,yBAAiB,CAAC,CAAC;wBACxC,IAAI,CAAC,eAAe,EAAE;4BACpB,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAC,IAAI,MAAA,EAAE,QAAQ,UAAA,EAAC,CAAC,CAAC;4BAE3D,MAAM,IAAI,aAAa,CAAC,cAAc,CACpC,sFAA+E,IAAI,CAAE,CACtF,CAAC;yBACH;wBAEK,SAAS,GAAc,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;wBAC3D,qBAAM,UAAU,CAAC,EAAC,MAAM,QAAA,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,iBAAA,EAAC,CAAC,EAAA;;wBAAnE,IAAI,CAAC,CAAC,SAA6D,CAAC,EAAE;4BACpE,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE;gCAClC,IAAI,MAAA;gCACJ,QAAQ,UAAA;gCACR,eAAe,iBAAA;6BAChB,CAAC,CAAC;4BAEH,MAAM,IAAI,aAAa,CAAC,iBAAiB,CAAC,yBAAyB,CAAC,CAAC;yBACtE;wBAED,GAAG,CAAC,KAAK,CAAC,iDAAiD,EAAE;4BAC3D,IAAI,MAAA;4BACJ,QAAQ,UAAA;yBACT,CAAC,CAAC;wBAEG,IAAI,GAAG;4BACX,SAAS,EAAE,MAAM,CAAC,MAAM;4BACxB,aAAa,EAAE,MAAM,CAAC,YAAY;4BAClC,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;yBACxB,CAAC;wBAEI,UAAU,GAAG;4BACjB,IAAI,EAAE,2BAA2B;4BACjC,IAAI,EAAE,gBAAQ,CAAC,IAAI;4BACnB,IAAI,EAAE,IAAI;yBACX,CAAC;wBACI,SAAS,GAAG,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE,IAAI,CAAE,CAAC;wBAElE,UAAU,GAAG,IAAA,mCAAqB,EAAC,MAAM,CAAC,CAAC;wBAC3C,MAAM,GAAG,IAAI,UAAU,CAAC,EAAC,MAAM,EAAE,SAAS,EAAC,CAAC,CAAC;wBAC9B,qBAAM,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAA;;wBAA5C,YAAY,GAAG,SAA6B;wBAElD,GAAG,CAAC,IAAI,CAAC,yCAAyC,EAAE,EAAC,IAAI,MAAA,EAAE,QAAQ,UAAA,EAAC,CAAC,CAAC;wBAEhE,OAAO,GAAY,aAAa,CAAC;4BACrC,YAAY,cAAA;4BACZ,IAAI,EAAE,SAAS;4BACf,eAAe,iBAAA;4BACf,QAAQ,UAAA;4BACR,MAAM,QAAA;yBACP,CAAC,CAAC;6BAEC,CAAC,MAAM,CAAC,aAAa,EAArB,wBAAqB;wBACvB,qBAAM,OAAO,CAAC,UAAU,CAAC,2BAAmB,EAAE,OAAO,CAAC,EAAE,EAAE;gCACxD,OAAO,EAAE,OAAO,CAAC,OAAO;gCACxB,QAAQ,EAAE,KAAK;gCACf,MAAM,EAAE,IAAI;6BACb,CAAC,EAAA;;wBAJF,SAIE,CAAC;;;;wBAIO,qBAAM,IAAA,6BAAsB,EACpC,OAAO,CAAC,QAAQ,CAAC,OAAQ,EACzB,WAAW,CACZ,EAAA;4BAJH,uBACE,UAAO,GAAE,CAAC,SAGT,CAAM;4BACP,UAAO,UAAA;iCACP;;;;KACH,CAAC;AACJ,CAAC;AA/FD,wCA+FC;AAED,SAAe,UAAU,CAAC,EAQzB;QAPC,MAAM,YAAA,EACN,KAAK,WAAA,EACL,eAAe,qBAAA;;;;wBAOZ,qBAAM,IAAA,mCAAkB,EAAC,MAAM,CAAC,CAAC,KAAK,CAAC,EAAA;wBAD1C,sBAAO,CACL,CAAC,SAAuC,CAAC;wBACzC,IAAA,0BAAW,EAAC,KAAK,CAAC,KAAM,EAAE,eAAe,CAAC,CAC3C,EAAC;;;;CACH;AAED,SAAS,aAAa,CAAC,EAYtB;QAXC,MAAM,YAAA,EACN,YAAY,kBAAA,EACZ,IAAI,UAAA,EACJ,eAAe,qBAAA,EACf,QAAQ,cAAA;IAQR,IACE,CAAC,QAAQ;QACR,YAAY,CAAC,IAA6B,CAAC,eAAe,EAC3D;QACA,MAAM,IAAI,aAAa,CAAC,iBAAiB,CACvC,0GAA0G;YACxG,uFAAuF,CAC1F,CAAC;KACH;IAED,IACE,QAAQ;QACR,CAAE,YAAY,CAAC,IAA6B,CAAC,eAAe,EAC5D;QACA,MAAM,IAAI,aAAa,CAAC,iBAAiB,CACvC,0GAA0G;YACxG,uFAAuF,CAC1F,CAAC;KACH;IAED,IAAI,QAAQ,EAAE;QACZ,IAAI,SAAS,SAAQ,CAAC;QACtB,IAAM,YAAY,GAAG,YAAY,CAAC,IAA4B,CAAC;QACxD,IAAA,YAAY,GAAoB,YAAY,aAAhC,EAAE,KAAK,GAAa,YAAY,MAAzB,EAAK,IAAI,kBAAI,YAAY,EAA7C,yBAA8B,CAAD,CAAiB;QACpD,IAAM,iBAAiB,GAAG,IAAI,IAAI,CAChC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,UAAU,GAAG,IAAI,CAC5C,CAAC;QAEF,IAAI,MAAM,CAAC,aAAa,EAAE;YACxB,SAAS,GAAG,IAAA,qCAAqB,EAAC,MAAM,CAAC,CACvC,IAAI,EACJ,UAAI,IAAyB,CAAC,eAAe,CAAC,EAAE,CAAE,CACnD,CAAC;SACH;aAAM;YACL,SAAS,GAAG,IAAA,SAAM,GAAE,CAAC;SACtB;QAED,OAAO,IAAI,iBAAO,CAAC;YACjB,EAAE,EAAE,SAAS;YACb,IAAI,MAAA;YACJ,KAAK,EAAE,eAAe;YACtB,QAAQ,UAAA;YACR,WAAW,EAAE,YAAY;YACzB,KAAK,OAAA;YACL,OAAO,EAAE,iBAAiB;YAC1B,gBAAgB,EAAE,IAAI;SACvB,CAAC,CAAC;KACJ;SAAM;QACL,IAAM,YAAY,GAAG,YAAY,CAAC,IAA2B,CAAC;QAC9D,OAAO,IAAI,iBAAO,CAAC;YACjB,EAAE,EAAE,IAAA,kCAAkB,EAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACpC,IAAI,MAAA;YACJ,KAAK,EAAE,eAAe;YACtB,QAAQ,UAAA;YACR,WAAW,EAAE,YAAY,CAAC,YAAY;YACtC,KAAK,EAAE,YAAY,CAAC,KAAK;SAC1B,CAAC,CAAC;KACJ;AACH,CAAC;AAED,SAAS,iBAAiB,CAAC,YAAqB,EAAE,OAAe;IAC/D,IAAI,YAAY,EAAE;QAChB,MAAM,IAAI,aAAa,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;KAClD;AACH,CAAC"}

package/lib/auth/oauth/safe-compare.d.ts

@@ -0,0 +1,6 @@
+export declare function safeCompare(strA: string | {
+    [key: string]: string;
+} | string[] | number[], strB: string | {
+    [key: string]: string;
+} | string[] | number[]): boolean;
+//# sourceMappingURL=safe-compare.d.ts.map

package/lib/auth/oauth/safe-compare.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-compare.d.ts","sourceRoot":"","sources":["safe-compare.ts"],"names":[],"mappings":"AAEA,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,GAAG;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,EAC5D,IAAI,EAAE,MAAM,GAAG;IAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;CAAC,GAAG,MAAM,EAAE,GAAG,MAAM,EAAE,GAC3D,OAAO,CAeT"}

package/lib/auth/oauth/safe-compare.js

@@ -0,0 +1,31 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.safeCompare = void 0;
+var tslib_1 = require("tslib");
+var ShopifyErrors = tslib_1.__importStar(require("../../error"));
+function safeCompare(strA, strB) {
+    if (typeof strA === typeof strB) {
+        var enc = new TextEncoder();
+        var buffA = enc.encode(JSON.stringify(strA));
+        var buffB = enc.encode(JSON.stringify(strB));
+        if (buffA.length === buffB.length) {
+            return timingSafeEqual(buffA, buffB);
+        }
+    }
+    else {
+        throw new ShopifyErrors.SafeCompareError("Mismatched data types provided: ".concat(typeof strA, " and ").concat(typeof strB));
+    }
+    return false;
+}
+exports.safeCompare = safeCompare;
+// Buffer must be same length for this function to be secure.
+function timingSafeEqual(bufA, bufB) {
+    var viewA = new Uint8Array(bufA);
+    var viewB = new Uint8Array(bufB);
+    var out = 0;
+    for (var i = 0; i < viewA.length; i++) {
+        out |= viewA[i] ^ viewB[i];
+    }
+    return out === 0;
+}
+//# sourceMappingURL=safe-compare.js.map

package/lib/auth/oauth/safe-compare.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-compare.js","sourceRoot":"","sources":["safe-compare.ts"],"names":[],"mappings":";;;;AAAA,iEAA6C;AAE7C,SAAgB,WAAW,CACzB,IAA4D,EAC5D,IAA4D;IAE5D,IAAI,OAAO,IAAI,KAAK,OAAO,IAAI,EAAE;QAC/B,IAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;QAC9B,IAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAC/C,IAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/C,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE;YACjC,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;SACtC;KACF;SAAM;QACL,MAAM,IAAI,aAAa,CAAC,gBAAgB,CACtC,0CAAmC,OAAO,IAAI,kBAAQ,OAAO,IAAI,CAAE,CACpE,CAAC;KACH;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAlBD,kCAkBC;AAED,6DAA6D;AAC7D,SAAS,eAAe,CAAC,IAAiB,EAAE,IAAiB;IAC3D,IAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,GAAG,CAAC,CAAC;IACZ,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACrC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;KAC5B;IACD,OAAO,GAAG,KAAK,CAAC,CAAC;AACnB,CAAC"}