@shopify/shopify-api 9.7.2 → 11.0.0

package/dist/esm/adapters/mock/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../../../adapters/mock/index.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;AAmBA,oBAAoB,CAAC,SAAS,CAAC,CAAC;AAChC,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;AAClD,8BAA8B,CAAC,mBAAmB,CAAC,CAAC;AACpD,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;AAClD,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;AAC5C,SAAS,CAAC,MAAa,CAAC"}

package/dist/esm/adapters/mock/mock_test_requests.mjs

@@ -0,0 +1,23 @@
+const mockTestRequests = {
+    requestList: [],
+    responseList: [],
+    queueResponse(response) {
+        this.responseList.push(response);
+    },
+    queueError(error) {
+        this.responseList.push(error);
+    },
+    getRequest() {
+        return this.requestList.shift();
+    },
+    getResponses() {
+        return this.responseList;
+    },
+    reset() {
+        this.requestList = [];
+        this.responseList = [];
+    },
+};
+
+export { mockTestRequests };
+//# sourceMappingURL=mock_test_requests.mjs.map

package/dist/esm/adapters/mock/mock_test_requests.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"mock_test_requests.mjs","sources":["../../../../../../adapters/mock/mock_test_requests.ts"],"sourcesContent":[null],"names":[],"mappings":"AAea,MAAA,gBAAgB,GAAkB;AAC7C,IAAA,WAAW,EAAE,EAAE;AACf,IAAA,YAAY,EAAE,EAAE;AAEhB,IAAA,aAAa,CAAC,QAA4B,EAAA;AACxC,QAAA,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;KAClC;AAED,IAAA,UAAU,CAAC,KAAY,EAAA;AACrB,QAAA,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;KAC/B;IAED,UAAU,GAAA;AACR,QAAA,OAAO,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC;KACjC;IAED,YAAY,GAAA;QACV,OAAO,IAAI,CAAC,YAAY,CAAC;KAC1B;IAED,KAAK,GAAA;AACH,QAAA,IAAI,CAAC,WAAW,GAAG,EAAE,CAAC;AACtB,QAAA,IAAI,CAAC,YAAY,GAAG,EAAE,CAAC;KACxB;;;;;"}

package/dist/esm/adapters/node/adapter.mjs

@@ -0,0 +1,42 @@
+import '../../runtime/crypto/crypto.mjs';
+import '../../runtime/crypto/types.mjs';
+import { canonicalizeHeaders } from '../../runtime/http/headers.mjs';
+
+async function nodeConvertRequest(adapterArgs) {
+    const req = adapterArgs.rawRequest;
+    return {
+        headers: canonicalizeHeaders({ ...req.headers }),
+        method: req.method ?? 'GET',
+        // Express.js overrides the url property, so we want to use originalUrl for it
+        url: req.originalUrl || req.url,
+    };
+}
+async function nodeConvertIncomingResponse(adapterArgs) {
+    return {
+        statusCode: adapterArgs.rawResponse.statusCode,
+        statusText: adapterArgs.rawResponse.statusMessage,
+        headers: canonicalizeHeaders(adapterArgs.rawResponse.getHeaders()),
+    };
+}
+async function nodeConvertAndSendResponse(response, adapterArgs) {
+    const res = adapterArgs.rawResponse;
+    if (response.headers) {
+        await nodeConvertAndSetHeaders(response.headers, adapterArgs);
+    }
+    if (response.body) {
+        res.write(response.body);
+    }
+    res.statusCode = response.statusCode;
+    res.statusMessage = response.statusText;
+    res.end();
+}
+async function nodeConvertAndSetHeaders(headers, adapterArgs) {
+    const res = adapterArgs.rawResponse;
+    Object.entries(headers).forEach(([header, value]) => res.setHeader(header, value));
+}
+function nodeRuntimeString() {
+    return `Node ${process.version}`;
+}
+
+export { nodeConvertAndSendResponse, nodeConvertAndSetHeaders, nodeConvertIncomingResponse, nodeConvertRequest, nodeRuntimeString };
+//# sourceMappingURL=adapter.mjs.map

package/dist/esm/adapters/node/adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.mjs","sources":["../../../../../../adapters/node/adapter.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAeO,eAAe,kBAAkB,CACtC,WAA4B,EAAA;AAE5B,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,UAAU,CAAC;IAEnC,OAAO;QACL,OAAO,EAAE,mBAAmB,CAAC,EAAC,GAAG,GAAG,CAAC,OAAO,EAAQ,CAAC;AACrD,QAAA,MAAM,EAAE,GAAG,CAAC,MAAM,IAAI,KAAK;;AAE3B,QAAA,GAAG,EAAG,GAAW,CAAC,WAAW,IAAI,GAAG,CAAC,GAAI;KAC1C,CAAC;AACJ,CAAC;AAEM,eAAe,2BAA2B,CAC/C,WAA4B,EAAA;IAE5B,OAAO;AACL,QAAA,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,UAAU;AAC9C,QAAA,UAAU,EAAE,WAAW,CAAC,WAAW,CAAC,aAAa;QACjD,OAAO,EAAE,mBAAmB,CAC1B,WAAW,CAAC,WAAW,CAAC,UAAU,EAAoB,CACvD;KACoB,CAAC;AAC1B,CAAC;AAEM,eAAe,0BAA0B,CAC9C,QAA4B,EAC5B,WAA4B,EAAA;AAE5B,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC;AAEpC,IAAA,IAAI,QAAQ,CAAC,OAAO,EAAE;QACpB,MAAM,wBAAwB,CAAC,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAC,CAAC;KAC/D;AAED,IAAA,IAAI,QAAQ,CAAC,IAAI,EAAE;AACjB,QAAA,GAAG,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;KAC1B;AAED,IAAA,GAAG,CAAC,UAAU,GAAG,QAAQ,CAAC,UAAU,CAAC;AACrC,IAAA,GAAG,CAAC,aAAa,GAAG,QAAQ,CAAC,UAAU,CAAC;IAExC,GAAG,CAAC,GAAG,EAAE,CAAC;AACZ,CAAC;AAEM,eAAe,wBAAwB,CAC5C,OAAgB,EAChB,WAA4B,EAAA;AAE5B,IAAA,MAAM,GAAG,GAAG,WAAW,CAAC,WAAW,CAAC;IAEpC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,EAAE,KAAK,CAAC,KAC9C,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,CAC7B,CAAC;AACJ,CAAC;SAEe,iBAAiB,GAAA;AAC/B,IAAA,OAAO,CAAQ,KAAA,EAAA,OAAO,CAAC,OAAO,EAAE,CAAC;AACnC;;;;"}

package/dist/esm/adapters/node/index.mjs

@@ -0,0 +1,17 @@
+import crypto from 'crypto';
+import fetch from 'node-fetch';
+import { setAbstractFetchFunc, setAbstractConvertRequestFunc, setAbstractConvertIncomingResponseFunc, setAbstractConvertResponseFunc, setAbstractConvertHeadersFunc } from '../../runtime/http/index.mjs';
+import '../../runtime/crypto/types.mjs';
+import { setCrypto } from '../../runtime/crypto/crypto.mjs';
+import { setAbstractRuntimeString } from '../../runtime/platform/runtime-string.mjs';
+import { nodeConvertRequest, nodeConvertIncomingResponse, nodeConvertAndSendResponse, nodeConvertAndSetHeaders, nodeRuntimeString } from './adapter.mjs';
+
+// For the purposes of this package, fetch correctly implements everything we need
+setAbstractFetchFunc(fetch);
+setAbstractConvertRequestFunc(nodeConvertRequest);
+setAbstractConvertIncomingResponseFunc(nodeConvertIncomingResponse);
+setAbstractConvertResponseFunc(nodeConvertAndSendResponse);
+setAbstractConvertHeadersFunc(nodeConvertAndSetHeaders);
+setAbstractRuntimeString(nodeRuntimeString);
+setCrypto(crypto);
+//# sourceMappingURL=index.mjs.map

package/dist/esm/adapters/node/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../../../adapters/node/index.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;;AAuBA;AACA,oBAAoB,CAAC,KAAiC,CAAC,CAAC;AACxD,6BAA6B,CAAC,kBAAkB,CAAC,CAAC;AAClD,sCAAsC,CAAC,2BAA2B,CAAC,CAAC;AACpE,8BAA8B,CAAC,0BAA0B,CAAC,CAAC;AAC3D,6BAA6B,CAAC,wBAAwB,CAAC,CAAC;AACxD,wBAAwB,CAAC,iBAAiB,CAAC,CAAC;AAC5C,SAAS,CAAC,MAAa,CAAC"}

package/dist/esm/adapters/web-api/adapter.mjs

@@ -0,0 +1,34 @@
+import '../../runtime/crypto/crypto.mjs';
+import '../../runtime/crypto/types.mjs';
+import { addHeader, flatHeaders } from '../../runtime/http/headers.mjs';
+
+async function webApiConvertRequest(adapterArgs) {
+    const request = adapterArgs.rawRequest;
+    const headers = {};
+    for (const [key, value] of request.headers.entries()) {
+        addHeader(headers, key, value);
+    }
+    return {
+        headers,
+        method: request.method ?? 'GET',
+        url: new URL(request.url).toString(),
+    };
+}
+async function webApiConvertHeaders(headers, _adapterArgs) {
+    const remixHeaders = new Headers();
+    flatHeaders(headers ?? {}).forEach(([key, value]) => remixHeaders.append(key, value));
+    return Promise.resolve(remixHeaders);
+}
+async function webApiConvertResponse(resp, adapterArgs) {
+    return new Response(resp.body, {
+        status: resp.statusCode,
+        statusText: resp.statusText,
+        headers: await webApiConvertHeaders(resp.headers ?? {}),
+    });
+}
+function webApiRuntimeString() {
+    return 'Web API';
+}
+
+export { webApiConvertHeaders, webApiConvertRequest, webApiConvertResponse, webApiRuntimeString };
+//# sourceMappingURL=adapter.mjs.map

package/dist/esm/adapters/web-api/adapter.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"adapter.mjs","sources":["../../../../../../adapters/web-api/adapter.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;AAYO,eAAe,oBAAoB,CACxC,WAA8B,EAAA;AAE9B,IAAA,MAAM,OAAO,GAAG,WAAW,CAAC,UAAU,CAAC;IACvC,MAAM,OAAO,GAAG,EAAE,CAAC;AACnB,IAAA,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,OAAO,CAAC,OAAO,CAAC,OAAO,EAAE,EAAE;AACpD,QAAA,SAAS,CAAC,OAAO,EAAE,GAAG,EAAE,KAAK,CAAC,CAAC;KAChC;IAED,OAAO;QACL,OAAO;AACP,QAAA,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,KAAK;QAC/B,GAAG,EAAE,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,QAAQ,EAAE;KACrC,CAAC;AACJ,CAAC;AAEM,eAAe,oBAAoB,CACxC,OAAuB,EACvB,YAA+B,EAAA;AAE/B,IAAA,MAAM,YAAY,GAAG,IAAI,OAAO,EAAE,CAAC;IACnC,WAAW,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,EAAE,KAAK,CAAC,KAC9C,YAAY,CAAC,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,CAChC,CAAC;AACF,IAAA,OAAO,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AACvC,CAAC;AAEM,eAAe,qBAAqB,CACzC,IAAwB,EACxB,WAA8B,EAAA;AAE9B,IAAA,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE;QAC7B,MAAM,EAAE,IAAI,CAAC,UAAU;QACvB,UAAU,EAAE,IAAI,CAAC,UAAU;QAC3B,OAAO,EAAE,MAAM,oBAAoB,CAAC,IAAI,CAAC,OAAO,IAAI,EAAe,CAAC;AACrE,KAAA,CAAC,CAAC;AACL,CAAC;SAEe,mBAAmB,GAAA;AACjC,IAAA,OAAO,SAAS,CAAC;AACnB;;;;"}

package/dist/esm/adapters/web-api/index.mjs

@@ -0,0 +1,12 @@
+import { setAbstractFetchFunc, setAbstractConvertRequestFunc, setAbstractConvertResponseFunc, setAbstractConvertHeadersFunc } from '../../runtime/http/index.mjs';
+import '../../runtime/crypto/types.mjs';
+import '../../runtime/crypto/crypto.mjs';
+import { setAbstractRuntimeString } from '../../runtime/platform/runtime-string.mjs';
+import { webApiConvertRequest, webApiConvertResponse, webApiConvertHeaders, webApiRuntimeString } from './adapter.mjs';
+
+setAbstractFetchFunc(fetch);
+setAbstractConvertRequestFunc(webApiConvertRequest);
+setAbstractConvertResponseFunc(webApiConvertResponse);
+setAbstractConvertHeadersFunc(webApiConvertHeaders);
+setAbstractRuntimeString(webApiRuntimeString);
+//# sourceMappingURL=index.mjs.map

package/dist/esm/adapters/web-api/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../../../adapters/web-api/index.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAeA,oBAAoB,CAAC,KAAK,CAAC,CAAC;AAC5B,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;AACpD,8BAA8B,CAAC,qBAAqB,CAAC,CAAC;AACtD,6BAA6B,CAAC,oBAAoB,CAAC,CAAC;AACpD,wBAAwB,CAAC,mBAAmB,CAAC"}

package/dist/esm/future/flags.mjs

@@ -0,0 +1,18 @@
+function logDisabledFutureFlags(config, logger) {
+    if (!config._logDisabledFutureFlags) {
+        return;
+    }
+    const logFlag = (flag, message) => logger.info(`Future flag ${flag} is disabled.\n\n  ${message}\n`);
+    if (!config.future?.lineItemBilling) {
+        logFlag('lineItemBilling', 'Enable this flag to use the new billing API, that supports multiple line items per plan.');
+    }
+    if (config.future?.v10_lineItemBilling) {
+        logger.deprecated('12.0.0', 'v10_lineItemBilling will become enabled in v11. Use flag lineItemBilling instead');
+    }
+    if (!config.future?.customerAddressDefaultFix) {
+        logFlag('customerAddressDefaultFix', "Enable this flag to change the CustomerAddress classes to expose a 'is_default' property instead of 'default' when fetching data.");
+    }
+}
+
+export { logDisabledFutureFlags };
+//# sourceMappingURL=flags.mjs.map

package/dist/esm/future/flags.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"flags.mjs","sources":["../../../../../future/flags.ts"],"sourcesContent":[null],"names":[],"mappings":"AAuCgB,SAAA,sBAAsB,CACpC,MAAuB,EACvB,MAAqB,EAAA;AAErB,IAAA,IAAI,CAAC,MAAM,CAAC,uBAAuB,EAAE;QACnC,OAAO;KACR;AAED,IAAA,MAAM,OAAO,GAAG,CAAC,IAAY,EAAE,OAAe,KAC5C,MAAM,CAAC,IAAI,CAAC,CAAe,YAAA,EAAA,IAAI,sBAAsB,OAAO,CAAA,EAAA,CAAI,CAAC,CAAC;AAEpE,IAAA,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,eAAe,EAAE;AACnC,QAAA,OAAO,CACL,iBAAiB,EACjB,0FAA0F,CAC3F,CAAC;KACH;AACD,IAAA,IAAI,MAAM,CAAC,MAAM,EAAE,mBAAmB,EAAE;AACtC,QAAA,MAAM,CAAC,UAAU,CACf,QAAQ,EACR,kFAAkF,CACnF,CAAC;KACH;AAED,IAAA,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,yBAAyB,EAAE;AAC7C,QAAA,OAAO,CACL,2BAA2B,EAC3B,mIAAmI,CACpI,CAAC;KACH;AACH;;;;"}

package/dist/esm/lib/auth/decode-host.mjs

@@ -0,0 +1,6 @@
+function decodeHost(host) {
+    return atob(host);
+}
+
+export { decodeHost };
+//# sourceMappingURL=decode-host.mjs.map

package/dist/esm/lib/auth/decode-host.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"decode-host.mjs","sources":["../../../../../../lib/auth/decode-host.ts"],"sourcesContent":[null],"names":[],"mappings":"AAAM,SAAU,UAAU,CAAC,IAAY,EAAA;AACrC,IAAA,OAAO,IAAI,CAAC,IAAI,CAAC,CAAC;AACpB;;;;"}

package/dist/esm/lib/auth/get-embedded-app-url.mjs

@@ -0,0 +1,32 @@
+import { MissingRequiredArgument, InvalidRequestError } from '../error.mjs';
+import { abstractConvertRequest } from '../../runtime/http/index.mjs';
+import { sanitizeHost } from '../utils/shop-validator.mjs';
+import { decodeHost } from './decode-host.mjs';
+
+function getEmbeddedAppUrl(config) {
+    return async ({ ...adapterArgs }) => {
+        const request = await abstractConvertRequest(adapterArgs);
+        if (!request) {
+            throw new MissingRequiredArgument('getEmbeddedAppUrl requires a request object argument');
+        }
+        if (!request.url) {
+            throw new InvalidRequestError('Request does not contain a URL');
+        }
+        const url = new URL(request.url, `https://${request.headers.host}`);
+        const host = url.searchParams.get('host');
+        if (typeof host !== 'string') {
+            throw new InvalidRequestError('Request does not contain a host query parameter');
+        }
+        return buildEmbeddedAppUrl(config)(host);
+    };
+}
+function buildEmbeddedAppUrl(config) {
+    return (host) => {
+        sanitizeHost()(host, true);
+        const decodedHost = decodeHost(host);
+        return `https://${decodedHost}/apps/${config.apiKey}`;
+    };
+}
+
+export { buildEmbeddedAppUrl, getEmbeddedAppUrl };
+//# sourceMappingURL=get-embedded-app-url.mjs.map

package/dist/esm/lib/auth/get-embedded-app-url.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-embedded-app-url.mjs","sources":["../../../../../../lib/auth/get-embedded-app-url.ts"],"sourcesContent":[null],"names":["ShopifyErrors.MissingRequiredArgument","ShopifyErrors.InvalidRequestError"],"mappings":";;;;;AAcM,SAAU,iBAAiB,CAAC,MAAuB,EAAA;AACvD,IAAA,OAAO,OAAO,EAAC,GAAG,WAAW,EAA0B,KAAqB;AAC1E,QAAA,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAE1D,IAAI,CAAC,OAAO,EAAE;AACZ,YAAA,MAAM,IAAIA,uBAAqC,CAC7C,sDAAsD,CACvD,CAAC;SACH;AAED,QAAA,IAAI,CAAC,OAAO,CAAC,GAAG,EAAE;AAChB,YAAA,MAAM,IAAIC,mBAAiC,CACzC,gCAAgC,CACjC,CAAC;SACH;AAED,QAAA,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,CAAA,QAAA,EAAW,OAAO,CAAC,OAAO,CAAC,IAAI,CAAA,CAAE,CAAC,CAAC;QACpE,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;AAE1C,QAAA,IAAI,OAAO,IAAI,KAAK,QAAQ,EAAE;AAC5B,YAAA,MAAM,IAAIA,mBAAiC,CACzC,iDAAiD,CAClD,CAAC;SACH;AAED,QAAA,OAAO,mBAAmB,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAAC;AAC3C,KAAC,CAAC;AACJ,CAAC;AAEK,SAAU,mBAAmB,CACjC,MAAuB,EAAA;IAEvB,OAAO,CAAC,IAAY,KAAY;AAC9B,QAAA,YAAY,EAAE,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;AAC3B,QAAA,MAAM,WAAW,GAAG,UAAU,CAAC,IAAI,CAAC,CAAC;AAErC,QAAA,OAAO,WAAW,WAAW,CAAA,MAAA,EAAS,MAAM,CAAC,MAAM,EAAE,CAAC;AACxD,KAAC,CAAC;AACJ;;;;"}

package/dist/esm/lib/auth/index.mjs

@@ -0,0 +1,21 @@
+import { begin, callback } from './oauth/oauth.mjs';
+import { nonce } from './oauth/nonce.mjs';
+import { safeCompare } from './oauth/safe-compare.mjs';
+import { getEmbeddedAppUrl, buildEmbeddedAppUrl } from './get-embedded-app-url.mjs';
+import { tokenExchange } from './oauth/token-exchange.mjs';
+
+function shopifyAuth(config) {
+    const shopify = {
+        begin: begin(config),
+        callback: callback(config),
+        nonce,
+        safeCompare,
+        getEmbeddedAppUrl: getEmbeddedAppUrl(config),
+        buildEmbeddedAppUrl: buildEmbeddedAppUrl(config),
+        tokenExchange: tokenExchange(config),
+    };
+    return shopify;
+}
+
+export { shopifyAuth };
+//# sourceMappingURL=index.mjs.map

package/dist/esm/lib/auth/index.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.mjs","sources":["../../../../../../lib/auth/index.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;AAeM,SAAU,WAAW,CACzB,MAAc,EAAA;AAEd,IAAA,MAAM,OAAO,GAAG;AACd,QAAA,KAAK,EAAE,KAAK,CAAC,MAAM,CAAC;AACpB,QAAA,QAAQ,EAAE,QAAQ,CAAC,MAAM,CAAC;QAC1B,KAAK;QACL,WAAW;AACX,QAAA,iBAAiB,EAAE,iBAAiB,CAAC,MAAM,CAAC;AAC5C,QAAA,mBAAmB,EAAE,mBAAmB,CAAC,MAAM,CAAC;AAChD,QAAA,aAAa,EAAE,aAAa,CAAC,MAAM,CAAC;KACtB,CAAC;AAEjB,IAAA,OAAO,OAAO,CAAC;AACjB;;;;"}

package/dist/esm/lib/auth/oauth/create-session.mjs

@@ -0,0 +1,46 @@
+import { v4 } from 'uuid';
+import { Session } from '../../session/session.mjs';
+import { logger } from '../../logger/index.mjs';
+import { getJwtSessionId, getOfflineId } from '../../session/session-utils.mjs';
+
+function createSession({ config, accessTokenResponse, shop, state, }) {
+    const associatedUser = accessTokenResponse
+        .associated_user;
+    const isOnline = Boolean(associatedUser);
+    logger(config).info('Creating new session', { shop, isOnline });
+    if (isOnline) {
+        let sessionId;
+        const responseBody = accessTokenResponse;
+        const { access_token, scope, ...rest } = responseBody;
+        const sessionExpiration = new Date(Date.now() + responseBody.expires_in * 1000);
+        if (config.isEmbeddedApp) {
+            sessionId = getJwtSessionId(config)(shop, `${rest.associated_user.id}`);
+        }
+        else {
+            sessionId = v4();
+        }
+        return new Session({
+            id: sessionId,
+            shop,
+            state,
+            isOnline,
+            accessToken: access_token,
+            scope,
+            expires: sessionExpiration,
+            onlineAccessInfo: rest,
+        });
+    }
+    else {
+        return new Session({
+            id: getOfflineId(config)(shop),
+            shop,
+            state,
+            isOnline,
+            accessToken: accessTokenResponse.access_token,
+            scope: accessTokenResponse.scope,
+        });
+    }
+}
+
+export { createSession };
+//# sourceMappingURL=create-session.mjs.map

package/dist/esm/lib/auth/oauth/create-session.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-session.mjs","sources":["../../../../../../../lib/auth/oauth/create-session.ts"],"sourcesContent":[null],"names":["uuidv4"],"mappings":";;;;;AAaM,SAAU,aAAa,CAAC,EAC5B,MAAM,EACN,mBAAmB,EACnB,IAAI,EACJ,KAAK,GAMN,EAAA;IACC,MAAM,cAAc,GAAI,mBAA4C;AACjE,SAAA,eAAe,CAAC;AACnB,IAAA,MAAM,QAAQ,GAAG,OAAO,CAAC,cAAc,CAAC,CAAC;AAEzC,IAAA,MAAM,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,sBAAsB,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,CAAC,CAAC;IAE9D,IAAI,QAAQ,EAAE;AACZ,QAAA,IAAI,SAAiB,CAAC;QACtB,MAAM,YAAY,GAAG,mBAA2C,CAAC;QACjE,MAAM,EAAC,YAAY,EAAE,KAAK,EAAE,GAAG,IAAI,EAAC,GAAG,YAAY,CAAC;AACpD,QAAA,MAAM,iBAAiB,GAAG,IAAI,IAAI,CAChC,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC,UAAU,GAAG,IAAI,CAC5C,CAAC;AAEF,QAAA,IAAI,MAAM,CAAC,aAAa,EAAE;AACxB,YAAA,SAAS,GAAG,eAAe,CAAC,MAAM,CAAC,CACjC,IAAI,EACJ,CAAI,EAAA,IAAyB,CAAC,eAAe,CAAC,EAAE,CAAA,CAAE,CACnD,CAAC;SACH;aAAM;YACL,SAAS,GAAGA,EAAM,EAAE,CAAC;SACtB;QAED,OAAO,IAAI,OAAO,CAAC;AACjB,YAAA,EAAE,EAAE,SAAS;YACb,IAAI;YACJ,KAAK;YACL,QAAQ;AACR,YAAA,WAAW,EAAE,YAAY;YACzB,KAAK;AACL,YAAA,OAAO,EAAE,iBAAiB;AAC1B,YAAA,gBAAgB,EAAE,IAAI;AACvB,SAAA,CAAC,CAAC;KACJ;SAAM;QACL,OAAO,IAAI,OAAO,CAAC;AACjB,YAAA,EAAE,EAAE,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YAC9B,IAAI;YACJ,KAAK;YACL,QAAQ;YACR,WAAW,EAAE,mBAAmB,CAAC,YAAY;YAC7C,KAAK,EAAE,mBAAmB,CAAC,KAAK;AACjC,SAAA,CAAC,CAAC;KACJ;AACH;;;;"}

package/dist/esm/lib/auth/oauth/nonce.mjs

@@ -0,0 +1,16 @@
+import '../../../runtime/crypto/types.mjs';
+import { crypto as cryptoVar } from '../../../runtime/crypto/crypto.mjs';
+
+function nonce() {
+    const length = 15;
+    const bytes = cryptoVar.getRandomValues(new Uint8Array(length));
+    const nonce = bytes
+        .map((byte) => {
+        return byte % 10;
+    })
+        .join('');
+    return nonce;
+}
+
+export { nonce };
+//# sourceMappingURL=nonce.mjs.map

package/dist/esm/lib/auth/oauth/nonce.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"nonce.mjs","sources":["../../../../../../../lib/auth/oauth/nonce.ts"],"sourcesContent":[null],"names":["crypto"],"mappings":";;;SAIgB,KAAK,GAAA;IACnB,MAAM,MAAM,GAAG,EAAE,CAAC;AAElB,IAAA,MAAM,KAAK,GAAGA,SAAM,CAAC,eAAe,CAAC,IAAI,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC;IAE7D,MAAM,KAAK,GAAG,KAAK;AAChB,SAAA,GAAG,CAAC,CAAC,IAAY,KAAI;QACpB,OAAO,IAAI,GAAG,EAAE,CAAC;AACnB,KAAC,CAAC;SACD,IAAI,CAAC,EAAE,CAAC,CAAC;AAEZ,IAAA,OAAO,KAAK,CAAC;AACf;;;;"}

package/dist/esm/lib/auth/oauth/oauth.mjs

@@ -0,0 +1,153 @@
+import { isbot } from 'isbot';
+import { throwFailedRequest } from '../../clients/common.mjs';
+import ProcessedQuery from '../../utils/processed-query.mjs';
+import { BotActivityDetected, CookieNotFound, InvalidOAuthError, PrivateAppError } from '../../error.mjs';
+import { validateHmac } from '../../utils/hmac-validator.mjs';
+import { sanitizeShop } from '../../utils/shop-validator.mjs';
+import { abstractConvertRequest, abstractConvertIncomingResponse, abstractConvertResponse, abstractConvertHeaders } from '../../../runtime/http/index.mjs';
+import { logger } from '../../logger/index.mjs';
+import { DataType } from '../../clients/types.mjs';
+import { fetchRequestFactory } from '../../utils/fetch-request.mjs';
+import { STATE_COOKIE_NAME, SESSION_COOKIE_NAME } from './types.mjs';
+import { nonce } from './nonce.mjs';
+import { safeCompare } from './safe-compare.mjs';
+import { createSession } from './create-session.mjs';
+import { Cookies } from '../../../runtime/http/cookies.mjs';
+
+const logForBot = ({ request, log, func }) => {
+    log.debug(`Possible bot request to auth ${func}: `, {
+        userAgent: request.headers['User-Agent'],
+    });
+};
+function begin(config) {
+    return async ({ shop, callbackPath, isOnline, ...adapterArgs }) => {
+        throwIfCustomStoreApp(config.isCustomStoreApp, 'Cannot perform OAuth for private apps');
+        const log = logger(config);
+        log.info('Beginning OAuth', { shop, isOnline, callbackPath });
+        const request = await abstractConvertRequest(adapterArgs);
+        const response = await abstractConvertIncomingResponse(adapterArgs);
+        let userAgent = request.headers['User-Agent'];
+        if (Array.isArray(userAgent)) {
+            userAgent = userAgent[0];
+        }
+        if (isbot(userAgent)) {
+            logForBot({ request, log, func: 'begin' });
+            response.statusCode = 410;
+            return abstractConvertResponse(response, adapterArgs);
+        }
+        const cookies = new Cookies(request, response, {
+            keys: [config.apiSecretKey],
+            secure: true,
+        });
+        const state = nonce();
+        await cookies.setAndSign(STATE_COOKIE_NAME, state, {
+            expires: new Date(Date.now() + 60000),
+            sameSite: 'lax',
+            secure: true,
+            path: callbackPath,
+        });
+        const scopes = config.scopes ? config.scopes.toString() : '';
+        const query = {
+            client_id: config.apiKey,
+            scope: scopes,
+            redirect_uri: `${config.hostScheme}://${config.hostName}${callbackPath}`,
+            state,
+            'grant_options[]': isOnline ? 'per-user' : '',
+        };
+        const processedQuery = new ProcessedQuery();
+        processedQuery.putAll(query);
+        const cleanShop = sanitizeShop(config)(shop, true);
+        const redirectUrl = `https://${cleanShop}/admin/oauth/authorize${processedQuery.stringify()}`;
+        response.statusCode = 302;
+        response.statusText = 'Found';
+        response.headers = {
+            ...response.headers,
+            ...cookies.response.headers,
+            Location: redirectUrl,
+        };
+        log.debug(`OAuth started, redirecting to ${redirectUrl}`, { shop, isOnline });
+        return abstractConvertResponse(response, adapterArgs);
+    };
+}
+function callback(config) {
+    return async function callback({ ...adapterArgs }) {
+        throwIfCustomStoreApp(config.isCustomStoreApp, 'Cannot perform OAuth for private apps');
+        const log = logger(config);
+        const request = await abstractConvertRequest(adapterArgs);
+        const query = new URL(request.url, `${config.hostScheme}://${config.hostName}`).searchParams;
+        const shop = query.get('shop');
+        const response = {};
+        let userAgent = request.headers['User-Agent'];
+        if (Array.isArray(userAgent)) {
+            userAgent = userAgent[0];
+        }
+        if (isbot(userAgent)) {
+            logForBot({ request, log, func: 'callback' });
+            throw new BotActivityDetected('Invalid OAuth callback initiated by bot');
+        }
+        log.info('Completing OAuth', { shop });
+        const cookies = new Cookies(request, response, {
+            keys: [config.apiSecretKey],
+            secure: true,
+        });
+        const stateFromCookie = await cookies.getAndVerify(STATE_COOKIE_NAME);
+        cookies.deleteCookie(STATE_COOKIE_NAME);
+        if (!stateFromCookie) {
+            log.error('Could not find OAuth cookie', { shop });
+            throw new CookieNotFound(`Cannot complete OAuth process. Could not find an OAuth cookie for shop url: ${shop}`);
+        }
+        const authQuery = Object.fromEntries(query.entries());
+        if (!(await validQuery({ config, query: authQuery, stateFromCookie }))) {
+            log.error('Invalid OAuth callback', { shop, stateFromCookie });
+            throw new InvalidOAuthError('Invalid OAuth callback.');
+        }
+        log.debug('OAuth request is valid, requesting access token', { shop });
+        const body = {
+            client_id: config.apiKey,
+            client_secret: config.apiSecretKey,
+            code: query.get('code'),
+        };
+        const cleanShop = sanitizeShop(config)(query.get('shop'), true);
+        const postResponse = await fetchRequestFactory(config)(`https://${cleanShop}/admin/oauth/access_token`, {
+            method: 'POST',
+            body: JSON.stringify(body),
+            headers: {
+                'Content-Type': DataType.JSON,
+                Accept: DataType.JSON,
+            },
+        });
+        if (!postResponse.ok) {
+            throwFailedRequest(await postResponse.json(), false, postResponse);
+        }
+        const session = createSession({
+            accessTokenResponse: await postResponse.json(),
+            shop: cleanShop,
+            state: stateFromCookie,
+            config,
+        });
+        if (!config.isEmbeddedApp) {
+            await cookies.setAndSign(SESSION_COOKIE_NAME, session.id, {
+                expires: session.expires,
+                sameSite: 'lax',
+                secure: true,
+                path: '/',
+            });
+        }
+        return {
+            headers: (await abstractConvertHeaders(cookies.response.headers, adapterArgs)),
+            session,
+        };
+    };
+}
+async function validQuery({ config, query, stateFromCookie, }) {
+    return ((await validateHmac(config)(query)) &&
+        safeCompare(query.state, stateFromCookie));
+}
+function throwIfCustomStoreApp(isCustomStoreApp, message) {
+    if (isCustomStoreApp) {
+        throw new PrivateAppError(message);
+    }
+}
+
+export { begin, callback };
+//# sourceMappingURL=oauth.mjs.map

package/dist/esm/lib/auth/oauth/oauth.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"oauth.mjs","sources":["../../../../../../../lib/auth/oauth/oauth.ts"],"sourcesContent":[null],"names":["ShopifyErrors.BotActivityDetected","ShopifyErrors.CookieNotFound","ShopifyErrors.InvalidOAuthError","ShopifyErrors.PrivateAppError"],"mappings":";;;;;;;;;;;;;;;;AAqDA,MAAM,SAAS,GAAG,CAAC,EAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAS,KAAI;AACjD,IAAA,GAAG,CAAC,KAAK,CAAC,CAAgC,6BAAA,EAAA,IAAI,IAAI,EAAE;AAClD,QAAA,SAAS,EAAE,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC;AACzC,KAAA,CAAC,CAAC;AACL,CAAC,CAAC;AAEI,SAAU,KAAK,CAAC,MAAuB,EAAA;AAC3C,IAAA,OAAO,OAAO,EACZ,IAAI,EACJ,YAAY,EACZ,QAAQ,EACR,GAAG,WAAW,EACF,KAA8B;AAC1C,QAAA,qBAAqB,CACnB,MAAM,CAAC,gBAAgB,EACvB,uCAAuC,CACxC,CAAC;AAEF,QAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAC3B,QAAA,GAAG,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAE,YAAY,EAAC,CAAC,CAAC;AAE5D,QAAA,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;AAC1D,QAAA,MAAM,QAAQ,GAAG,MAAM,+BAA+B,CAAC,WAAW,CAAC,CAAC;QAEpE,IAAI,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AAC9C,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AAC5B,YAAA,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;SAC1B;AACD,QAAA,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE;YACpB,SAAS,CAAC,EAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,OAAO,EAAC,CAAC,CAAC;AACzC,YAAA,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;AAC1B,YAAA,OAAO,uBAAuB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;SACvD;QAED,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;AAC7C,YAAA,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;AAC3B,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,KAAK,GAAG,KAAK,EAAE,CAAC;AAEtB,QAAA,MAAM,OAAO,CAAC,UAAU,CAAC,iBAAiB,EAAE,KAAK,EAAE;YACjD,OAAO,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC;AACrC,YAAA,QAAQ,EAAE,KAAK;AACf,YAAA,MAAM,EAAE,IAAI;AACZ,YAAA,IAAI,EAAE,YAAY;AACnB,SAAA,CAAC,CAAC;AAEH,QAAA,MAAM,MAAM,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,GAAG,EAAE,CAAC;AAC7D,QAAA,MAAM,KAAK,GAAG;YACZ,SAAS,EAAE,MAAM,CAAC,MAAM;AACxB,YAAA,KAAK,EAAE,MAAM;YACb,YAAY,EAAE,CAAG,EAAA,MAAM,CAAC,UAAU,CAAM,GAAA,EAAA,MAAM,CAAC,QAAQ,CAAG,EAAA,YAAY,CAAE,CAAA;YACxE,KAAK;YACL,iBAAiB,EAAE,QAAQ,GAAG,UAAU,GAAG,EAAE;SAC9C,CAAC;AACF,QAAA,MAAM,cAAc,GAAG,IAAI,cAAc,EAAE,CAAC;AAC5C,QAAA,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QAE7B,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAE,CAAC;QACpD,MAAM,WAAW,GAAG,CAAA,QAAA,EAAW,SAAS,CAAA,sBAAA,EAAyB,cAAc,CAAC,SAAS,EAAE,CAAA,CAAE,CAAC;AAC9F,QAAA,QAAQ,CAAC,UAAU,GAAG,GAAG,CAAC;AAC1B,QAAA,QAAQ,CAAC,UAAU,GAAG,OAAO,CAAC;QAC9B,QAAQ,CAAC,OAAO,GAAG;YACjB,GAAG,QAAQ,CAAC,OAAO;AACnB,YAAA,GAAG,OAAO,CAAC,QAAQ,CAAC,OAAQ;AAC5B,YAAA,QAAQ,EAAE,WAAW;SACtB,CAAC;AAEF,QAAA,GAAG,CAAC,KAAK,CAAC,CAAA,8BAAA,EAAiC,WAAW,CAAA,CAAE,EAAE,EAAC,IAAI,EAAE,QAAQ,EAAC,CAAC,CAAC;AAE5E,QAAA,OAAO,uBAAuB,CAAC,QAAQ,EAAE,WAAW,CAAC,CAAC;AACxD,KAAC,CAAC;AACJ,CAAC;AAEK,SAAU,QAAQ,CAAC,MAAuB,EAAA;AAC9C,IAAA,OAAO,eAAe,QAAQ,CAAqB,EACjD,GAAG,WAAW,EACC,EAAA;AACf,QAAA,qBAAqB,CACnB,MAAM,CAAC,gBAAgB,EACvB,uCAAuC,CACxC,CAAC;AAEF,QAAA,MAAM,GAAG,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC;AAE3B,QAAA,MAAM,OAAO,GAAG,MAAM,sBAAsB,CAAC,WAAW,CAAC,CAAC;QAE1D,MAAM,KAAK,GAAG,IAAI,GAAG,CACnB,OAAO,CAAC,GAAG,EACX,CAAA,EAAG,MAAM,CAAC,UAAU,MAAM,MAAM,CAAC,QAAQ,CAAE,CAAA,CAC5C,CAAC,YAAY,CAAC;QACf,MAAM,IAAI,GAAG,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;QAEhC,MAAM,QAAQ,GAAG,EAAwB,CAAC;QAC1C,IAAI,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;AAC9C,QAAA,IAAI,KAAK,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE;AAC5B,YAAA,SAAS,GAAG,SAAS,CAAC,CAAC,CAAC,CAAC;SAC1B;AACD,QAAA,IAAI,KAAK,CAAC,SAAS,CAAC,EAAE;YACpB,SAAS,CAAC,EAAC,OAAO,EAAE,GAAG,EAAE,IAAI,EAAE,UAAU,EAAC,CAAC,CAAC;AAC5C,YAAA,MAAM,IAAIA,mBAAiC,CACzC,yCAAyC,CAC1C,CAAC;SACH;QAED,GAAG,CAAC,IAAI,CAAC,kBAAkB,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;QAErC,MAAM,OAAO,GAAG,IAAI,OAAO,CAAC,OAAO,EAAE,QAAQ,EAAE;AAC7C,YAAA,IAAI,EAAE,CAAC,MAAM,CAAC,YAAY,CAAC;AAC3B,YAAA,MAAM,EAAE,IAAI;AACb,SAAA,CAAC,CAAC;QAEH,MAAM,eAAe,GAAG,MAAM,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;AACtE,QAAA,OAAO,CAAC,YAAY,CAAC,iBAAiB,CAAC,CAAC;QACxC,IAAI,CAAC,eAAe,EAAE;YACpB,GAAG,CAAC,KAAK,CAAC,6BAA6B,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;YAEjD,MAAM,IAAIC,cAA4B,CACpC,CAA+E,4EAAA,EAAA,IAAI,CAAE,CAAA,CACtF,CAAC;SACH;QAED,MAAM,SAAS,GAAc,MAAM,CAAC,WAAW,CAAC,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;AACjE,QAAA,IAAI,EAAE,MAAM,UAAU,CAAC,EAAC,MAAM,EAAE,KAAK,EAAE,SAAS,EAAE,eAAe,EAAC,CAAC,CAAC,EAAE;YACpE,GAAG,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,IAAI,EAAE,eAAe,EAAC,CAAC,CAAC;AAE7D,YAAA,MAAM,IAAIC,iBAA+B,CAAC,yBAAyB,CAAC,CAAC;SACtE;QAED,GAAG,CAAC,KAAK,CAAC,iDAAiD,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AAErE,QAAA,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;AAClC,YAAA,IAAI,EAAE,KAAK,CAAC,GAAG,CAAC,MAAM,CAAC;SACxB,CAAC;AAEF,QAAA,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,MAAM,CAAE,EAAE,IAAI,CAAE,CAAC;QAElE,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CACpD,CAAA,QAAA,EAAW,SAAS,CAAA,yBAAA,CAA2B,EAC/C;AACE,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1B,YAAA,OAAO,EAAE;gBACP,cAAc,EAAE,QAAQ,CAAC,IAAI;gBAC7B,MAAM,EAAE,QAAQ,CAAC,IAAI;AACtB,aAAA;AACF,SAAA,CACF,CAAC;AAEF,QAAA,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;YACpB,kBAAkB,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;SACpE;QAED,MAAM,OAAO,GAAY,aAAa,CAAC;AACrC,YAAA,mBAAmB,EAAE,MAAM,YAAY,CAAC,IAAI,EAAuB;AACnE,YAAA,IAAI,EAAE,SAAS;AACf,YAAA,KAAK,EAAE,eAAe;YACtB,MAAM;AACP,SAAA,CAAC,CAAC;AAEH,QAAA,IAAI,CAAC,MAAM,CAAC,aAAa,EAAE;YACzB,MAAM,OAAO,CAAC,UAAU,CAAC,mBAAmB,EAAE,OAAO,CAAC,EAAE,EAAE;gBACxD,OAAO,EAAE,OAAO,CAAC,OAAO;AACxB,gBAAA,QAAQ,EAAE,KAAK;AACf,gBAAA,MAAM,EAAE,IAAI;AACZ,gBAAA,IAAI,EAAE,GAAG;AACV,aAAA,CAAC,CAAC;SACJ;QAED,OAAO;AACL,YAAA,OAAO,GAAG,MAAM,sBAAsB,CACpC,OAAO,CAAC,QAAQ,CAAC,OAAQ,EACzB,WAAW,CACZ,CAAM;YACP,OAAO;SACR,CAAC;AACJ,KAAC,CAAC;AACJ,CAAC;AAED,eAAe,UAAU,CAAC,EACxB,MAAM,EACN,KAAK,EACL,eAAe,GAKhB,EAAA;IACC,QACE,CAAC,MAAM,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC;QAClC,WAAW,CAAC,KAAK,CAAC,KAAM,EAAE,eAAe,CAAC,EAC1C;AACJ,CAAC;AAED,SAAS,qBAAqB,CAC5B,gBAAyB,EACzB,OAAe,EAAA;IAEf,IAAI,gBAAgB,EAAE;AACpB,QAAA,MAAM,IAAIC,eAA6B,CAAC,OAAO,CAAC,CAAC;KAClD;AACH;;;;"}

package/dist/esm/lib/auth/oauth/safe-compare.mjs

@@ -0,0 +1,29 @@
+import { SafeCompareError } from '../../error.mjs';
+
+const safeCompare = (strA, strB) => {
+    if (typeof strA === typeof strB) {
+        const enc = new TextEncoder();
+        const buffA = enc.encode(JSON.stringify(strA));
+        const buffB = enc.encode(JSON.stringify(strB));
+        if (buffA.length === buffB.length) {
+            return timingSafeEqual(buffA, buffB);
+        }
+    }
+    else {
+        throw new SafeCompareError(`Mismatched data types provided: ${typeof strA} and ${typeof strB}`);
+    }
+    return false;
+};
+// Buffer must be same length for this function to be secure.
+function timingSafeEqual(bufA, bufB) {
+    const viewA = new Uint8Array(bufA);
+    const viewB = new Uint8Array(bufB);
+    let out = 0;
+    for (let i = 0; i < viewA.length; i++) {
+        out |= viewA[i] ^ viewB[i];
+    }
+    return out === 0;
+}
+
+export { safeCompare };
+//# sourceMappingURL=safe-compare.mjs.map

package/dist/esm/lib/auth/oauth/safe-compare.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"safe-compare.mjs","sources":["../../../../../../../lib/auth/oauth/safe-compare.ts"],"sourcesContent":[null],"names":["ShopifyErrors.SafeCompareError"],"mappings":";;MAOa,WAAW,GAAgB,CAAC,IAAI,EAAE,IAAI,KAAI;AACrD,IAAA,IAAI,OAAO,IAAI,KAAK,OAAO,IAAI,EAAE;AAC/B,QAAA,MAAM,GAAG,GAAG,IAAI,WAAW,EAAE,CAAC;AAC9B,QAAA,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;AAC/C,QAAA,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QAE/C,IAAI,KAAK,CAAC,MAAM,KAAK,KAAK,CAAC,MAAM,EAAE;AACjC,YAAA,OAAO,eAAe,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;SACtC;KACF;SAAM;AACL,QAAA,MAAM,IAAIA,gBAA8B,CACtC,CAAA,gCAAA,EAAmC,OAAO,IAAI,CAAQ,KAAA,EAAA,OAAO,IAAI,CAAA,CAAE,CACpE,CAAC;KACH;AACD,IAAA,OAAO,KAAK,CAAC;AACf,EAAE;AAEF;AACA,SAAS,eAAe,CAAC,IAAiB,EAAE,IAAiB,EAAA;AAC3D,IAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;AACnC,IAAA,MAAM,KAAK,GAAG,IAAI,UAAU,CAAC,IAAI,CAAC,CAAC;IACnC,IAAI,GAAG,GAAG,CAAC,CAAC;AACZ,IAAA,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE;QACrC,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC;KAC5B;IACD,OAAO,GAAG,KAAK,CAAC,CAAC;AACnB;;;;"}

package/dist/esm/lib/auth/oauth/token-exchange.mjs

@@ -0,0 +1,51 @@
+import { throwFailedRequest } from '../../clients/common.mjs';
+import { decodeSessionToken } from '../../session/decode-session-token.mjs';
+import { sanitizeShop } from '../../utils/shop-validator.mjs';
+import { DataType } from '../../clients/types.mjs';
+import { fetchRequestFactory } from '../../utils/fetch-request.mjs';
+import { createSession } from './create-session.mjs';
+
+var RequestedTokenType;
+(function (RequestedTokenType) {
+    RequestedTokenType["OnlineAccessToken"] = "urn:shopify:params:oauth:token-type:online-access-token";
+    RequestedTokenType["OfflineAccessToken"] = "urn:shopify:params:oauth:token-type:offline-access-token";
+})(RequestedTokenType || (RequestedTokenType = {}));
+const TokenExchangeGrantType = 'urn:ietf:params:oauth:grant-type:token-exchange';
+const IdTokenType = 'urn:ietf:params:oauth:token-type:id_token';
+function tokenExchange(config) {
+    return async ({ shop, sessionToken, requestedTokenType, }) => {
+        await decodeSessionToken(config)(sessionToken);
+        const body = {
+            client_id: config.apiKey,
+            client_secret: config.apiSecretKey,
+            grant_type: TokenExchangeGrantType,
+            subject_token: sessionToken,
+            subject_token_type: IdTokenType,
+            requested_token_type: requestedTokenType,
+        };
+        const cleanShop = sanitizeShop(config)(shop, true);
+        const postResponse = await fetchRequestFactory(config)(`https://${cleanShop}/admin/oauth/access_token`, {
+            method: 'POST',
+            body: JSON.stringify(body),
+            headers: {
+                'Content-Type': DataType.JSON,
+                Accept: DataType.JSON,
+            },
+        });
+        if (!postResponse.ok) {
+            throwFailedRequest(await postResponse.json(), false, postResponse);
+        }
+        return {
+            session: createSession({
+                accessTokenResponse: await postResponse.json(),
+                shop: cleanShop,
+                // We need to keep this as an empty string as our template DB schemas have this required
+                state: '',
+                config,
+            }),
+        };
+    };
+}
+
+export { RequestedTokenType, tokenExchange };
+//# sourceMappingURL=token-exchange.mjs.map

package/dist/esm/lib/auth/oauth/token-exchange.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.mjs","sources":["../../../../../../../lib/auth/oauth/token-exchange.ts"],"sourcesContent":[null],"names":[],"mappings":";;;;;;;IAWY,mBAGX;AAHD,CAAA,UAAY,kBAAkB,EAAA;AAC5B,IAAA,kBAAA,CAAA,mBAAA,CAAA,GAAA,yDAA6E,CAAA;AAC7E,IAAA,kBAAA,CAAA,oBAAA,CAAA,GAAA,0DAA+E,CAAA;AACjF,CAAC,EAHW,kBAAkB,KAAlB,kBAAkB,GAG7B,EAAA,CAAA,CAAA,CAAA;AAED,MAAM,sBAAsB,GAC1B,iDAAiD,CAAC;AACpD,MAAM,WAAW,GAAG,2CAA2C,CAAC;AAY1D,SAAU,aAAa,CAAC,MAAuB,EAAA;IACnD,OAAO,OAAO,EACZ,IAAI,EACJ,YAAY,EACZ,kBAAkB,GACE,KAAI;AACxB,QAAA,MAAM,kBAAkB,CAAC,MAAM,CAAC,CAAC,YAAY,CAAC,CAAC;AAE/C,QAAA,MAAM,IAAI,GAAG;YACX,SAAS,EAAE,MAAM,CAAC,MAAM;YACxB,aAAa,EAAE,MAAM,CAAC,YAAY;AAClC,YAAA,UAAU,EAAE,sBAAsB;AAClC,YAAA,aAAa,EAAE,YAAY;AAC3B,YAAA,kBAAkB,EAAE,WAAW;AAC/B,YAAA,oBAAoB,EAAE,kBAAkB;SACzC,CAAC;QAEF,MAAM,SAAS,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,IAAI,CAAE,CAAC;QAEpD,MAAM,YAAY,GAAG,MAAM,mBAAmB,CAAC,MAAM,CAAC,CACpD,CAAA,QAAA,EAAW,SAAS,CAAA,yBAAA,CAA2B,EAC/C;AACE,YAAA,MAAM,EAAE,MAAM;AACd,YAAA,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;AAC1B,YAAA,OAAO,EAAE;gBACP,cAAc,EAAE,QAAQ,CAAC,IAAI;gBAC7B,MAAM,EAAE,QAAQ,CAAC,IAAI;AACtB,aAAA;AACF,SAAA,CACF,CAAC;AAEF,QAAA,IAAI,CAAC,YAAY,CAAC,EAAE,EAAE;YACpB,kBAAkB,CAAC,MAAM,YAAY,CAAC,IAAI,EAAE,EAAE,KAAK,EAAE,YAAY,CAAC,CAAC;SACpE;QAED,OAAO;YACL,OAAO,EAAE,aAAa,CAAC;AACrB,gBAAA,mBAAmB,EAAE,MAAM,YAAY,CAAC,IAAI,EAAuB;AACnE,gBAAA,IAAI,EAAE,SAAS;;AAEf,gBAAA,KAAK,EAAE,EAAE;gBACT,MAAM;aACP,CAAC;SACH,CAAC;AACJ,KAAC,CAAC;AACJ;;;;"}

package/dist/esm/lib/auth/oauth/types.mjs

@@ -0,0 +1,5 @@
+const SESSION_COOKIE_NAME = 'shopify_app_session';
+const STATE_COOKIE_NAME = 'shopify_app_state';
+
+export { SESSION_COOKIE_NAME, STATE_COOKIE_NAME };
+//# sourceMappingURL=types.mjs.map

package/dist/esm/lib/auth/oauth/types.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.mjs","sources":["../../../../../../../lib/auth/oauth/types.ts"],"sourcesContent":[null],"names":[],"mappings":"AAEO,MAAM,mBAAmB,GAAG,sBAAsB;AAClD,MAAM,iBAAiB,GAAG;;;;"}