@shopify/shopify-app-remix 1.0.4 → 1.1.0

package/build/ts/{auth → server/authenticate/admin}/helpers/redirect-with-exitiframe.d.ts

@@ -1,3 +1,3 @@
-import type { BasicParams } from '../../types';
+import type { BasicParams } from '../../../types';
 export declare function redirectWithExitIframe(params: BasicParams, request: Request, shop: string): never;
 //# sourceMappingURL=redirect-with-exitiframe.d.ts.map

package/build/ts/server/authenticate/admin/helpers/redirect-with-exitiframe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-exitiframe.d.ts","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/helpers/redirect-with-exitiframe.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,gBAAgB,CAAC;AAEhD,wBAAgB,sBAAsB,CACpC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,OAAO,EAChB,IAAI,EAAE,MAAM,GACX,KAAK,CAeP"}

package/build/ts/server/authenticate/admin/helpers/redirect-with-exitiframe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-exitiframe.js","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/helpers/redirect-with-exitiframe.ts"],"names":[],"mappings":";;;AAAA,4DAAmD;AAInD,SAAgB,sBAAsB,CACpC,MAAmB,EACnB,OAAgB,EAChB,IAAY;IAEL,IAAA,GAAG,GAAY,MAAM,IAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAC7B,IAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,IAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;IACrC,IAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;IAE9D,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC9B,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,UAAG,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAS,IAAI,CAAE,CAAC,CAAC;IAElE,IAAI,IAAI,EAAE;QACR,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;KAC/B;IAED,MAAM,IAAA,yBAAQ,EAAC,UAAG,MAAM,CAAC,IAAI,CAAC,cAAc,cAAI,WAAW,CAAC,QAAQ,EAAE,CAAE,CAAC,CAAC;AAC5E,CAAC;AAnBD,wDAmBC"}

package/build/ts/server/authenticate/admin/helpers/redirect.d.ts

@@ -0,0 +1,9 @@
+import { TypedResponse } from '@remix-run/server-runtime';
+import { BasicParams } from '../../../types';
+export type RedirectTarget = '_self' | '_parent' | '_top';
+export type RedirectInit = number | (ResponseInit & {
+    target?: RedirectTarget;
+});
+export type RedirectFunction = (url: string, init?: RedirectInit) => TypedResponse<never>;
+export declare function redirectFactory(params: BasicParams, request: Request): RedirectFunction;
+//# sourceMappingURL=redirect.d.ts.map

package/build/ts/server/authenticate/admin/helpers/redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.d.ts","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/helpers/redirect.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,aAAa,EAEd,MAAM,2BAA2B,CAAC;AAEnC,OAAO,EAAC,WAAW,EAAC,MAAM,gBAAgB,CAAC;AAM3C,MAAM,MAAM,cAAc,GAAG,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;AAC1D,MAAM,MAAM,YAAY,GAAG,MAAM,GAAG,CAAC,YAAY,GAAG;IAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CAAC,CAAC,CAAC;AAC/E,MAAM,MAAM,gBAAgB,GAAG,CAC7B,GAAG,EAAE,MAAM,EACX,IAAI,CAAC,EAAE,YAAY,KAChB,aAAa,CAAC,KAAK,CAAC,CAAC;AAE1B,wBAAgB,eAAe,CAC7B,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,OAAO,GACf,gBAAgB,CAqClB"}

package/build/ts/server/authenticate/admin/helpers/redirect.js

@@ -0,0 +1,64 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.redirectFactory = void 0;
+var server_runtime_1 = require("@remix-run/server-runtime");
+var get_session_token_header_1 = require("../../helpers/get-session-token-header");
+var render_app_bridge_1 = require("./render-app-bridge");
+var redirect_with_app_bridge_headers_1 = require("./redirect-with-app-bridge-headers");
+function redirectFactory(params, request) {
+    var config = params.config;
+    return function redirect(url, init) {
+        var searchParams = new URL(request.url).searchParams;
+        var parsedUrl = new URL(url, config.appUrl);
+        var isSameOrigin = parsedUrl.origin === config.appUrl;
+        if (isSameOrigin || url.startsWith('/')) {
+            searchParams.forEach(function (value, key) {
+                if (!parsedUrl.searchParams.has(key)) {
+                    parsedUrl.searchParams.set(key, value);
+                }
+            });
+        }
+        var target = (typeof init !== 'number' && (init === null || init === void 0 ? void 0 : init.target)) || '_self';
+        if (target === '_self') {
+            if (isBounceRequest(request)) {
+                throw (0, render_app_bridge_1.renderAppBridge)(params, request, {
+                    url: parsedUrl.toString(),
+                    target: target,
+                });
+            }
+            else {
+                return (0, server_runtime_1.redirect)(parsedUrl.toString(), init);
+            }
+        }
+        else if (isDataRequest(request)) {
+            throw (0, redirect_with_app_bridge_headers_1.redirectWithAppBridgeHeaders)(parsedUrl.toString());
+        }
+        else if (isEmbeddedRequest(request)) {
+            throw (0, render_app_bridge_1.renderAppBridge)(params, request, {
+                url: parsedUrl.toString(),
+                target: target,
+            });
+        }
+        return (0, server_runtime_1.redirect)(url, init);
+    };
+}
+exports.redirectFactory = redirectFactory;
+function isBounceRequest(request) {
+    return (Boolean((0, get_session_token_header_1.getSessionTokenHeader)(request)) &&
+        request.headers.has('X-Shopify-Bounce'));
+}
+function isDataRequest(request) {
+    var searchParams = new URL(request.url).searchParams;
+    var isGet = request.method === 'GET';
+    var sessionTokenHeader = Boolean((0, get_session_token_header_1.getSessionTokenHeader)(request));
+    var sessionTokenSearchParam = searchParams.has('id_token');
+    return (sessionTokenHeader &&
+        !sessionTokenSearchParam &&
+        !isBounceRequest(request) &&
+        (!isEmbeddedRequest(request) || !isGet));
+}
+function isEmbeddedRequest(request) {
+    var searchParams = new URL(request.url).searchParams;
+    return searchParams.get('embedded') === '1';
+}
+//# sourceMappingURL=redirect.js.map

package/build/ts/server/authenticate/admin/helpers/redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.js","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/helpers/redirect.ts"],"names":[],"mappings":";;;AAAA,4DAGmC;AAGnC,mFAA6E;AAE7E,yDAAoD;AACpD,uFAAgF;AAShF,SAAgB,eAAe,CAC7B,MAAmB,EACnB,OAAgB;IAET,IAAA,MAAM,GAAI,MAAM,OAAV,CAAW;IAExB,OAAO,SAAS,QAAQ,CAAC,GAAG,EAAE,IAAkB;QACvC,IAAA,YAAY,GAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAxB,CAAyB;QAC5C,IAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE9C,IAAM,YAAY,GAAG,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QACxD,IAAI,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;YACvC,YAAY,CAAC,OAAO,CAAC,UAAC,KAAK,EAAE,GAAG;gBAC9B,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;oBACpC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;iBACxC;YACH,CAAC,CAAC,CAAC;SACJ;QAED,IAAM,MAAM,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,KAAI,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,MAAM,CAAA,CAAC,IAAI,OAAO,CAAC;QACrE,IAAI,MAAM,KAAK,OAAO,EAAE;YACtB,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE;gBAC5B,MAAM,IAAA,mCAAe,EAAC,MAAM,EAAE,OAAO,EAAE;oBACrC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;oBACzB,MAAM,QAAA;iBACP,CAAC,CAAC;aACJ;iBAAM;gBACL,OAAO,IAAA,yBAAa,EAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;aAClD;SACF;aAAM,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;YACjC,MAAM,IAAA,+DAA4B,EAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;SAC1D;aAAM,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE;YACrC,MAAM,IAAA,mCAAe,EAAC,MAAM,EAAE,OAAO,EAAE;gBACrC,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACzB,MAAM,QAAA;aACP,CAAC,CAAC;SACJ;QAED,OAAO,IAAA,yBAAa,EAAC,GAAG,EAAE,IAAI,CAAC,CAAC;IAClC,CAAC,CAAC;AACJ,CAAC;AAxCD,0CAwCC;AAED,SAAS,eAAe,CAAC,OAAgB;IACvC,OAAO,CACL,OAAO,CAAC,IAAA,gDAAqB,EAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB;IAC9B,IAAA,YAAY,GAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAxB,CAAyB;IAE5C,IAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IACvC,IAAM,kBAAkB,GAAG,OAAO,CAAC,IAAA,gDAAqB,EAAC,OAAO,CAAC,CAAC,CAAC;IACnE,IAAM,uBAAuB,GAAG,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC;IAE7D,OAAO,CACL,kBAAkB;QAClB,CAAC,uBAAuB;QACxB,CAAC,eAAe,CAAC,OAAO,CAAC;QACzB,CAAC,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CACxC,CAAC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB;IAClC,IAAA,YAAY,GAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAxB,CAAyB;IAE5C,OAAO,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;AAC9C,CAAC"}

package/build/ts/server/authenticate/admin/helpers/render-app-bridge.d.ts

@@ -0,0 +1,8 @@
+import { BasicParams } from '../../../types';
+import type { RedirectTarget } from '.';
+export interface RedirectToOptions {
+    url: string | URL;
+    target?: RedirectTarget;
+}
+export declare function renderAppBridge({ config }: BasicParams, request: Request, redirectTo?: RedirectToOptions): never;
+//# sourceMappingURL=render-app-bridge.d.ts.map

package/build/ts/server/authenticate/admin/helpers/render-app-bridge.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-app-bridge.d.ts","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/helpers/render-app-bridge.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,gBAAgB,CAAC;AAI3C,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,GAAG,CAAC;AAEtC,MAAM,WAAW,iBAAiB;IAChC,GAAG,EAAE,MAAM,GAAG,GAAG,CAAC;IAClB,MAAM,CAAC,EAAE,cAAc,CAAC;CACzB;AAED,wBAAgB,eAAe,CAC7B,EAAC,MAAM,EAAC,EAAE,WAAW,EACrB,OAAO,EAAE,OAAO,EAChB,UAAU,CAAC,EAAE,iBAAiB,GAC7B,KAAK,CA2BP"}

package/build/ts/server/authenticate/admin/helpers/render-app-bridge.js

@@ -0,0 +1,22 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.renderAppBridge = void 0;
+var app_bridge_url_1 = require("../../helpers/app-bridge-url");
+var add_response_headers_1 = require("../../helpers/add-response-headers");
+function renderAppBridge(_a, request, redirectTo) {
+    var _b;
+    var config = _a.config;
+    var redirectToScript = '';
+    if (redirectTo) {
+        var destination = new URL(redirectTo.url, config.appUrl);
+        var target = (_b = redirectTo.target) !== null && _b !== void 0 ? _b : '_top';
+        redirectToScript = "<script>window.open(".concat(JSON.stringify(destination.toString()), ", ").concat(JSON.stringify(target), ")</script>");
+    }
+    var responseHeaders = new Headers({
+        'content-type': 'text/html;charset=utf-8',
+    });
+    (0, add_response_headers_1.addDocumentResponseHeaders)(responseHeaders, config.isEmbeddedApp, new URL(request.url).searchParams.get('shop'));
+    throw new Response("\n      <script data-api-key=\"".concat(config.apiKey, "\" src=\"").concat((0, app_bridge_url_1.appBridgeUrl)(), "\"></script>\n      ").concat(redirectToScript, "\n    "), { headers: responseHeaders });
+}
+exports.renderAppBridge = renderAppBridge;
+//# sourceMappingURL=render-app-bridge.js.map

package/build/ts/server/authenticate/admin/helpers/render-app-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-app-bridge.js","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/helpers/render-app-bridge.ts"],"names":[],"mappings":";;;AACA,+DAA0D;AAC1D,2EAA8E;AAS9E,SAAgB,eAAe,CAC7B,EAAqB,EACrB,OAAgB,EAChB,UAA8B;;QAF7B,MAAM,YAAA;IAIP,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,UAAU,EAAE;QACd,IAAM,WAAW,GAAG,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC3D,IAAM,MAAM,GAAG,MAAA,UAAU,CAAC,MAAM,mCAAI,MAAM,CAAC;QAE3C,gBAAgB,GAAG,8BAAuB,IAAI,CAAC,SAAS,CACtD,WAAW,CAAC,QAAQ,EAAE,CACvB,eAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,eAAY,CAAC;KAC1C;IAED,IAAM,eAAe,GAAG,IAAI,OAAO,CAAC;QAClC,cAAc,EAAE,yBAAyB;KAC1C,CAAC,CAAC;IACH,IAAA,iDAA0B,EACxB,eAAe,EACf,MAAM,CAAC,aAAa,EACpB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAC9C,CAAC;IAEF,MAAM,IAAI,QAAQ,CAChB,yCAC0B,MAAM,CAAC,MAAM,sBAAU,IAAA,6BAAY,GAAE,iCAC3D,gBAAgB,WACnB,EACD,EAAC,OAAO,EAAE,eAAe,EAAC,CAC3B,CAAC;AACJ,CAAC;AA/BD,0CA+BC"}

package/build/ts/{auth → server/authenticate}/admin/types.d.ts

@@ -1,7 +1,8 @@
 import { JwtPayload, Session, ShopifyRestResources } from '@shopify/shopify-api';
-import type { AdminApiContext, AppConfigArg } from '../../config-types';
-import type { BillingContext } from '../../billing/types';
 import { EnsureCORSFunction } from '../helpers/ensure-cors-headers';
+import type { AdminApiContext, AppConfigArg } from '../../config-types';
+import type { BillingContext } from './billing/types';
+import { RedirectFunction } from './helpers/redirect';
 interface AdminContextInternal<Config extends AppConfigArg, Resources extends ShopifyRestResources = ShopifyRestResources> {
     /**
      * The session for the user who made the request.
@@ -111,6 +112,25 @@ export interface EmbeddedAdminContext<Config extends AppConfigArg, Resources ext
      * ```
      */
     sessionToken: JwtPayload;
+    /**
+     * A function that redirects the user to a new page, ensuring that the appropriate parameters are set for embedded
+     * apps
+     *
+     * @example
+     * Redirecting the user to the app's home page
+     * ```ts
+     * // app/routes/admin/widgets.ts
+     * import { LoaderArgs, json } from "@remix-run/node";
+     * import { authenticate } from "../shopify.server";
+     * import { getWidgets } from "~/db/widgets.server";
+     *
+     * export const loader = async ({ request }: LoaderArgs) => {
+     *   const { session, redirect } = await authenticate.admin(request);
+     *   return redirect("/");
+     * };
+     * ```
+     */
+    redirect: RedirectFunction;
 }
 export interface NonEmbeddedAdminContext<Config extends AppConfigArg, Resources extends ShopifyRestResources = ShopifyRestResources> extends AdminContextInternal<Config, Resources> {
 }

package/build/ts/server/authenticate/admin/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/admin/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAC,kBAAkB,EAAC,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAC,eAAe,EAAE,YAAY,EAAC,MAAM,oBAAoB,CAAC;AAEtE,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AAEpD,UAAU,oBAAoB,CAC5B,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB;IAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA4CG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAElC;;;;OAIG;IACH,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;;;;;;;;;;;;;OAgBG;IACH,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB,CACnC,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,CAC7D,SAAQ,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC;IAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OA8BG;IACH,YAAY,EAAE,UAAU,CAAC;IAEzB;;;;;;;;;;;;;;;;;OAiBG;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AACD,MAAM,WAAW,uBAAuB,CACtC,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,CAC7D,SAAQ,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC;CAAG;AAEpD,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,IAC3D,MAAM,CAAC,eAAe,CAAC,SAAS,KAAK,GACrC,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,GAC1C,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC"}

package/build/ts/server/authenticate/admin/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/admin/types.ts"],"names":[],"mappings":""}

package/build/ts/server/authenticate/const.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"const.d.ts","sourceRoot":"","sources":["../../../../src/server/authenticate/const.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,uDAC2B,CAAC;AAEvD,eAAO,MAAM,iBAAiB,kDACmB,CAAC;AAElD,eAAO,MAAM,YAAY;;;;CAIxB,CAAC"}

package/build/ts/server/authenticate/const.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"const.js","sourceRoot":"","sources":["../../../../src/server/authenticate/const.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GACzB,oDAAoD,CAAC;AAE1C,QAAA,iBAAiB,GAC5B,+CAA+C,CAAC;AAErC,QAAA,YAAY,GAAG;IAC1B,6BAA6B,EAAE,GAAG;IAClC,8BAA8B,EAAE,eAAe;IAC/C,+BAA+B,EAAE,yBAAiB;CACnD,CAAC"}

package/build/ts/server/authenticate/helpers/add-response-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-response-headers.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/add-response-headers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,wBAAgB,iCAAiC,CAAC,MAAM,EAAE,WAAW,aAGzC,OAAO,WAAW,OAAO,UAMpD;AAED,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,OAAO,EAChB,aAAa,EAAE,OAAO,EACtB,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,QAmBhC"}

package/build/ts/server/authenticate/helpers/add-response-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"add-response-headers.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/add-response-headers.ts"],"names":[],"mappings":";;;AAEA,SAAgB,iCAAiC,CAAC,MAAmB;IAC5D,IAAA,GAAG,GAAY,MAAM,IAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAE7B,OAAO,UAAU,OAAgB,EAAE,OAAgB;QAC1C,IAAA,YAAY,GAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAxB,CAAyB;QAC5C,IAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QAE/D,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC;AATD,8EASC;AAED,SAAgB,0BAA0B,CACxC,OAAgB,EAChB,aAAsB,EACtB,IAA+B;IAE/B,IAAI,IAAI,EAAE;QACR,OAAO,CAAC,GAAG,CACT,MAAM,EACN,mFAAmF,CACpF,CAAC;KACH;IAED,IAAI,aAAa,EAAE;QACjB,IAAI,IAAI,EAAE;YACR,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,kCAA2B,IAAI,mDAAgD,CAChF,CAAC;SACH;KACF;SAAM;QACL,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;KACnE;AACH,CAAC;AAtBD,gEAsBC"}

package/build/ts/server/authenticate/helpers/app-bridge-url.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-bridge-url.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/app-bridge-url.ts"],"names":[],"mappings":"AAGA,wBAAgB,uBAAuB,CAAC,GAAG,EAAE,MAAM,QAElD;AAED,wBAAgB,YAAY,WAE3B"}

package/build/ts/server/authenticate/helpers/app-bridge-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"app-bridge-url.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/app-bridge-url.ts"],"names":[],"mappings":";;;AAAA,kCAAwC;AAExC,IAAI,oBAAwC,CAAC;AAC7C,SAAgB,uBAAuB,CAAC,GAAW;IACjD,oBAAoB,GAAG,GAAG,CAAC;AAC7B,CAAC;AAFD,0DAEC;AAED,SAAgB,YAAY;IAC1B,OAAO,oBAAoB,IAAI,sBAAc,CAAC;AAChD,CAAC;AAFD,oCAEC"}

package/build/ts/{auth → server/authenticate}/helpers/ensure-cors-headers.d.ts

@@ -2,5 +2,5 @@ import { BasicParams } from '../../types';
 export interface EnsureCORSFunction {
     (response: Response): Response;
 }
-export declare function ensureCORSHeadersFactory(params: BasicParams, request: Request): EnsureCORSFunction;
+export declare function ensureCORSHeadersFactory(params: BasicParams, request: Request, corsHeaders?: string[]): EnsureCORSFunction;
 //# sourceMappingURL=ensure-cors-headers.d.ts.map

package/build/ts/server/authenticate/helpers/ensure-cors-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-cors-headers.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/ensure-cors-headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAGxC,MAAM,WAAW,kBAAkB;IACjC,CAAC,QAAQ,EAAE,QAAQ,GAAG,QAAQ,CAAC;CAChC;AAED,wBAAgB,wBAAwB,CACtC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,OAAO,EAChB,WAAW,GAAE,MAAM,EAAO,GACzB,kBAAkB,CA0BpB"}

package/build/ts/{auth → server/authenticate}/helpers/ensure-cors-headers.js

@@ -1,15 +1,21 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.ensureCORSHeadersFactory = void 0;
+var tslib_1 = require("tslib");
 var const_1 = require("../const");
-function ensureCORSHeadersFactory(params, request) {
+function ensureCORSHeadersFactory(params, request, corsHeaders) {
+    if (corsHeaders === void 0) { corsHeaders = []; }
     var logger = params.logger, config = params.config;
     return function ensureCORSHeaders(response) {
         var origin = request.headers.get('Origin');
         if (origin && origin !== config.appUrl) {
             logger.debug('Request comes from a different origin, adding CORS headers');
+            var corsHeadersSet = new Set(tslib_1.__spreadArray([
+                'Authorization',
+                'Content-Type'
+            ], tslib_1.__read(corsHeaders), false));
             response.headers.set('Access-Control-Allow-Origin', '*');
-            response.headers.set('Access-Control-Allow-Headers', 'Authorization');
+            response.headers.set('Access-Control-Allow-Headers', tslib_1.__spreadArray([], tslib_1.__read(corsHeadersSet), false).join(', '));
             response.headers.set('Access-Control-Expose-Headers', const_1.REAUTH_URL_HEADER);
         }
         return response;

package/build/ts/server/authenticate/helpers/ensure-cors-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-cors-headers.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/ensure-cors-headers.ts"],"names":[],"mappings":";;;;AACA,kCAA2C;AAM3C,SAAgB,wBAAwB,CACtC,MAAmB,EACnB,OAAgB,EAChB,WAA0B;IAA1B,4BAAA,EAAA,gBAA0B;IAEnB,IAAA,MAAM,GAAY,MAAM,OAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAEhC,OAAO,SAAS,iBAAiB,CAAC,QAAQ;QACxC,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE;YACtC,MAAM,CAAC,KAAK,CACV,4DAA4D,CAC7D,CAAC;YAEF,IAAM,cAAc,GAAG,IAAI,GAAG;gBAC5B,eAAe;gBACf,cAAc;8BACX,WAAW,UACd,CAAC;YAEH,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACzD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,yCAAI,cAAc,UAAE,IAAI,CAAC,IAAI,CAAC,CAC/B,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,yBAAiB,CAAC,CAAC;SAC1E;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AA9BD,4DA8BC"}

package/build/ts/server/authenticate/helpers/get-session-token-header.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-session-token-header.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/get-session-token-header.ts"],"names":[],"mappings":"AAAA,wBAAgB,qBAAqB,CAAC,OAAO,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAE1E"}

package/build/ts/server/authenticate/helpers/get-session-token-header.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-session-token-header.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/get-session-token-header.ts"],"names":[],"mappings":";;;AAAA,SAAgB,qBAAqB,CAAC,OAAgB;;IACpD,OAAO,MAAA,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,0CAAE,OAAO,CAAC,SAAS,EAAE,EAAE,CAAC,CAAC;AACtE,CAAC;AAFD,sDAEC"}

package/build/ts/{auth → server/authenticate}/helpers/index.d.ts

@@ -1,12 +1,8 @@
 export * from './app-bridge-url';
 export * from './add-response-headers';
-export * from './redirect-to-auth-page';
-export * from './redirect-with-exitiframe';
-export * from './begin-auth';
 export * from './ensure-cors-headers';
 export * from './validate-session-token';
 export * from './get-session-token-header';
 export * from './reject-bot-request';
 export * from './respond-to-options-request';
-export * from './handle-client-error';
 //# sourceMappingURL=index.d.ts.map

package/build/ts/server/authenticate/helpers/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC"}

package/build/ts/{auth → server/authenticate}/helpers/index.js

@@ -3,13 +3,9 @@ Object.defineProperty(exports, "__esModule", { value: true });
 var tslib_1 = require("tslib");
 tslib_1.__exportStar(require("./app-bridge-url"), exports);
 tslib_1.__exportStar(require("./add-response-headers"), exports);
-tslib_1.__exportStar(require("./redirect-to-auth-page"), exports);
-tslib_1.__exportStar(require("./redirect-with-exitiframe"), exports);
-tslib_1.__exportStar(require("./begin-auth"), exports);
 tslib_1.__exportStar(require("./ensure-cors-headers"), exports);
 tslib_1.__exportStar(require("./validate-session-token"), exports);
 tslib_1.__exportStar(require("./get-session-token-header"), exports);
 tslib_1.__exportStar(require("./reject-bot-request"), exports);
 tslib_1.__exportStar(require("./respond-to-options-request"), exports);
-tslib_1.__exportStar(require("./handle-client-error"), exports);
 //# sourceMappingURL=index.js.map

package/build/ts/server/authenticate/helpers/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,iEAAuC;AACvC,gEAAsC;AACtC,mEAAyC;AACzC,qEAA2C;AAC3C,+DAAqC;AACrC,uEAA6C"}

package/build/ts/server/authenticate/helpers/reject-bot-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"reject-bot-request.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/reject-bot-request.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,wBAAgB,gBAAgB,CAC9B,EAAC,MAAM,EAAC,EAAE,WAAW,EACrB,OAAO,EAAE,OAAO,GACf,IAAI,GAAG,KAAK,CAKd"}

package/build/ts/server/authenticate/helpers/reject-bot-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"reject-bot-request.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/reject-bot-request.ts"],"names":[],"mappings":";;;;AAAA,wDAA0B;AAI1B,SAAgB,gBAAgB,CAC9B,EAAqB,EACrB,OAAgB;QADf,MAAM,YAAA;IAGP,IAAI,IAAA,eAAK,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAC,CAAC,CAAC;KAClE;AACH,CAAC;AARD,4CAQC"}

package/build/ts/server/authenticate/helpers/respond-to-options-request.d.ts

@@ -0,0 +1,3 @@
+import { BasicParams } from '../../types';
+export declare function respondToOptionsRequest(params: BasicParams, request: Request, corsHeaders?: string[]): void;
+//# sourceMappingURL=respond-to-options-request.d.ts.map

package/build/ts/server/authenticate/helpers/respond-to-options-request.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond-to-options-request.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/respond-to-options-request.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAIxC,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,WAAW,EACnB,OAAO,EAAE,OAAO,EAChB,WAAW,CAAC,EAAE,MAAM,EAAE,QAkBvB"}

package/build/ts/{auth → server/authenticate}/helpers/respond-to-options-request.js

@@ -2,9 +2,9 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.respondToOptionsRequest = void 0;
 var ensure_cors_headers_1 = require("./ensure-cors-headers");
-function respondToOptionsRequest(params, request) {
+function respondToOptionsRequest(params, request, corsHeaders) {
     if (request.method === 'OPTIONS') {
-        var ensureCORSHeaders = (0, ensure_cors_headers_1.ensureCORSHeadersFactory)(params, request);
+        var ensureCORSHeaders = (0, ensure_cors_headers_1.ensureCORSHeadersFactory)(params, request, corsHeaders);
         throw ensureCORSHeaders(new Response(null, {
             status: 204,
             headers: {

package/build/ts/server/authenticate/helpers/respond-to-options-request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"respond-to-options-request.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/respond-to-options-request.ts"],"names":[],"mappings":";;;AAEA,6DAA+D;AAE/D,SAAgB,uBAAuB,CACrC,MAAmB,EACnB,OAAgB,EAChB,WAAsB;IAEtB,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE;QAChC,IAAM,iBAAiB,GAAG,IAAA,8CAAwB,EAChD,MAAM,EACN,OAAO,EACP,WAAW,CACZ,CAAC;QAEF,MAAM,iBAAiB,CACrB,IAAI,QAAQ,CAAC,IAAI,EAAE;YACjB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE;gBACP,wBAAwB,EAAE,MAAM;aACjC;SACF,CAAC,CACH,CAAC;KACH;AACH,CAAC;AArBD,0DAqBC"}

package/build/ts/server/authenticate/helpers/validate-session-token.d.ts

@@ -0,0 +1,8 @@
+import { JwtPayload } from '@shopify/shopify-api';
+import type { BasicParams } from '../../types';
+interface ValidateSessionTokenOptions {
+    checkAudience?: boolean;
+}
+export declare function validateSessionToken({ api, logger }: BasicParams, token: string, { checkAudience }?: ValidateSessionTokenOptions): Promise<JwtPayload>;
+export {};
+//# sourceMappingURL=validate-session-token.d.ts.map

package/build/ts/server/authenticate/helpers/validate-session-token.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-session-token.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/validate-session-token.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAEhD,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,UAAU,2BAA2B;IACnC,aAAa,CAAC,EAAE,OAAO,CAAC;CACzB;AAED,wBAAsB,oBAAoB,CACxC,EAAC,GAAG,EAAE,MAAM,EAAC,EAAE,WAAW,EAC1B,KAAK,EAAE,MAAM,EACb,EAAC,aAAoB,EAAC,GAAE,2BAAgC,GACvD,OAAO,CAAC,UAAU,CAAC,CAmBrB"}

package/build/ts/{auth → server/authenticate}/helpers/validate-session-token.js

@@ -2,26 +2,29 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.validateSessionToken = void 0;
 var tslib_1 = require("tslib");
-function validateSessionToken(_a, token) {
+function validateSessionToken(_a, token, _b) {
     var api = _a.api, logger = _a.logger;
+    var _c = _b === void 0 ? {} : _b, _d = _c.checkAudience, checkAudience = _d === void 0 ? true : _d;
     return tslib_1.__awaiter(this, void 0, void 0, function () {
         var payload, error_1;
-        return tslib_1.__generator(this, function (_b) {
-            switch (_b.label) {
+        return tslib_1.__generator(this, function (_e) {
+            switch (_e.label) {
                 case 0:
                     logger.debug('Validating session token');
-                    _b.label = 1;
+                    _e.label = 1;
                 case 1:
-                    _b.trys.push([1, 3, , 4]);
-                    return [4 /*yield*/, api.session.decodeSessionToken(token)];
+                    _e.trys.push([1, 3, , 4]);
+                    return [4 /*yield*/, api.session.decodeSessionToken(token, {
+                            checkAudience: checkAudience,
+                        })];
                 case 2:
-                    payload = _b.sent();
+                    payload = _e.sent();
                     logger.debug('Session token is valid', {
                         payload: JSON.stringify(payload),
                     });
                     return [2 /*return*/, payload];
                 case 3:
-                    error_1 = _b.sent();
+                    error_1 = _e.sent();
                     logger.debug("Failed to validate session token: ".concat(error_1.message));
                     throw new Response(undefined, {
                         status: 401,

package/build/ts/server/authenticate/helpers/validate-session-token.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-session-token.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/validate-session-token.ts"],"names":[],"mappings":";;;;AAQA,SAAsB,oBAAoB,CACxC,EAA0B,EAC1B,KAAa,EACb,EAAwD;QAFvD,GAAG,SAAA,EAAE,MAAM,YAAA;QAEZ,qBAAsD,EAAE,KAAA,EAAvD,qBAAoB,EAApB,aAAa,mBAAG,IAAI,KAAA;;;;;;oBAErB,MAAM,CAAC,KAAK,CAAC,0BAA0B,CAAC,CAAC;;;;oBAGvB,qBAAM,GAAG,CAAC,OAAO,CAAC,kBAAkB,CAAC,KAAK,EAAE;4BAC1D,aAAa,eAAA;yBACd,CAAC,EAAA;;oBAFI,OAAO,GAAG,SAEd;oBACF,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE;wBACrC,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC;qBACjC,CAAC,CAAC;oBAEH,sBAAO,OAAO,EAAC;;;oBAEf,MAAM,CAAC,KAAK,CAAC,4CAAqC,OAAK,CAAC,OAAO,CAAE,CAAC,CAAC;oBACnE,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;wBAC5B,MAAM,EAAE,GAAG;wBACX,UAAU,EAAE,cAAc;qBAC3B,CAAC,CAAC;;;;;CAEN;AAvBD,oDAuBC"}

package/build/ts/server/authenticate/login/login.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/login/login.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,WAAW,EAAE,UAAU,EAAiB,MAAM,aAAa,CAAC;AAEpE,wBAAgB,YAAY,CAAC,MAAM,EAAE,WAAW,aAGT,OAAO,KAAG,QAAQ,UAAU,GAAG,KAAK,CAAC,CAoC3E"}

package/build/ts/server/authenticate/login/login.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"login.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/login/login.ts"],"names":[],"mappings":";;;;AAAA,4DAAmD;AAEnD,qCAAoE;AAEpE,SAAgB,YAAY,CAAC,MAAmB;IACvC,IAAA,GAAG,GAAoB,MAAM,IAA1B,EAAE,MAAM,GAAY,MAAM,OAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAErC,OAAO,SAAe,KAAK,CAAC,OAAgB;;;;;;wBACpC,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;wBAC3B,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;wBAE/C,IAAI,OAAO,CAAC,MAAM,KAAK,KAAK,IAAI,CAAC,SAAS,EAAE;4BAC1C,sBAAO,EAAE,EAAC;yBACX;wBAGC,KAAA,SAAS,CAAA;gCAAT,wBAAS;wBAAM,qBAAM,OAAO,CAAC,QAAQ,EAAE,EAAA;;wBAA1B,KAAC,CAAC,SAAwB,CAAC,CAAC,GAAG,CAAC,MAAM,CAAY,CAAA;;;wBAD3D,IAAI,KACuD;wBAEjE,IAAI,CAAC,IAAI,EAAE;4BACT,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,IAAI,MAAA,EAAC,CAAC,CAAC;4BAC/C,sBAAO,EAAC,IAAI,EAAE,sBAAc,CAAC,WAAW,EAAC,EAAC;yBAC3C;wBAEK,mBAAmB,GAAG,IAAI,CAAC,OAAO,CAAC,cAAc,EAAE,EAAE,CAAC,CAAC;wBACvD,cAAc,GAClB,CAAA,IAAI,aAAJ,IAAI,uBAAJ,IAAI,CAAE,OAAO,CAAC,GAAG,CAAC,MAAK,CAAC,CAAC;4BACvB,CAAC,CAAC,UAAG,mBAAmB,mBAAgB;4BACxC,CAAC,CAAC,mBAAmB,CAAC;wBACpB,aAAa,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,cAAc,CAAC,CAAC;wBAE7D,IAAI,CAAC,aAAa,EAAE;4BAClB,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,IAAI,MAAA,EAAC,CAAC,CAAC;4BAC/C,sBAAO,EAAC,IAAI,EAAE,sBAAc,CAAC,WAAW,EAAC,EAAC;yBAC3C;wBAEK,WAAW,GAAG,UAAG,MAAM,CAAC,MAAM,SAAG,MAAM,CAAC,IAAI,CAAC,IAAI,mBAAS,aAAa,CAAE,CAAC;wBAEhF,MAAM,CAAC,IAAI,CAAC,uCAAgC,WAAW,CAAE,EAAE;4BACzD,IAAI,EAAE,aAAa;yBACpB,CAAC,CAAC;wBAEH,MAAM,IAAA,yBAAQ,EAAC,WAAW,CAAC,CAAC;;;;KAC7B,CAAC;AACJ,CAAC;AAvCD,oCAuCC"}

package/build/ts/server/authenticate/public/authenticate.d.ts

@@ -0,0 +1,4 @@
+import type { BasicParams } from '../../types';
+import type { AuthenticatePublicOptions, PublicContext } from './types';
+export declare function authenticatePublicFactory(params: BasicParams): (request: Request, options?: AuthenticatePublicOptions) => Promise<PublicContext>;
+//# sourceMappingURL=authenticate.d.ts.map

package/build/ts/server/authenticate/public/authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/public/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAS7C,OAAO,KAAK,EAAC,yBAAyB,EAAE,aAAa,EAAC,MAAM,SAAS,CAAC;AAEtE,wBAAgB,yBAAyB,CAAC,MAAM,EAAE,WAAW,aAEhD,OAAO,YACP,yBAAyB,KACjC,QAAQ,aAAa,CAAC,CA2B1B"}

package/build/ts/{auth → server/authenticate}/public/authenticate.js

@@ -4,16 +4,19 @@ exports.authenticatePublicFactory = void 0;
 var tslib_1 = require("tslib");
 var helpers_1 = require("../helpers");
 function authenticatePublicFactory(params) {
-    return function authenticatePublic(request) {
+    return function authenticatePublic(request, options) {
+        var _a;
+        if (options === void 0) { options = {}; }
         return tslib_1.__awaiter(this, void 0, void 0, function () {
-            var logger, sessionTokenHeader;
-            var _a;
-            return tslib_1.__generator(this, function (_b) {
-                switch (_b.label) {
+            var logger, corsHeaders, sessionTokenHeader;
+            var _b;
+            return tslib_1.__generator(this, function (_c) {
+                switch (_c.label) {
                     case 0:
                         logger = params.logger;
+                        corsHeaders = (_a = options.corsHeaders) !== null && _a !== void 0 ? _a : [];
                         (0, helpers_1.rejectBotRequest)(params, request);
-                        (0, helpers_1.respondToOptionsRequest)(params, request);
+                        (0, helpers_1.respondToOptionsRequest)(params, request, corsHeaders);
                         sessionTokenHeader = (0, helpers_1.getSessionTokenHeader)(request);
                         logger.info('Authenticating public request');
                         if (!sessionTokenHeader) {
@@ -23,11 +26,13 @@ function authenticatePublicFactory(params) {
                                 statusText: 'Unauthorized',
                             });
                         }
-                        _a = {};
-                        return [4 /*yield*/, (0, helpers_1.validateSessionToken)(params, sessionTokenHeader)];
-                    case 1: return [2 /*return*/, (_a.sessionToken = _b.sent(),
-                            _a.cors = (0, helpers_1.ensureCORSHeadersFactory)(params, request),
-                            _a)];
+                        _b = {};
+                        return [4 /*yield*/, (0, helpers_1.validateSessionToken)(params, sessionTokenHeader, {
+                                checkAudience: false,
+                            })];
+                    case 1: return [2 /*return*/, (_b.sessionToken = _c.sent(),
+                            _b.cors = (0, helpers_1.ensureCORSHeadersFactory)(params, request, corsHeaders),
+                            _b)];
                 }
             });
         });

package/build/ts/server/authenticate/public/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/public/authenticate.ts"],"names":[],"mappings":";;;;AACA,sCAMoB;AAIpB,SAAgB,yBAAyB,CAAC,MAAmB;IAC3D,OAAO,SAAe,kBAAkB,CACtC,OAAgB,EAChB,OAAuC;;QAAvC,wBAAA,EAAA,YAAuC;;;;;;;wBAEhC,MAAM,GAAI,MAAM,OAAV,CAAW;wBAElB,WAAW,GAAG,MAAA,OAAO,CAAC,WAAW,mCAAI,EAAE,CAAC;wBAE9C,IAAA,0BAAgB,EAAC,MAAM,EAAE,OAAO,CAAC,CAAC;wBAClC,IAAA,iCAAuB,EAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC,CAAC;wBAEhD,kBAAkB,GAAG,IAAA,+BAAqB,EAAC,OAAO,CAAC,CAAC;wBAE1D,MAAM,CAAC,IAAI,CAAC,+BAA+B,CAAC,CAAC;wBAE7C,IAAI,CAAC,kBAAkB,EAAE;4BACvB,MAAM,CAAC,KAAK,CAAC,yCAAyC,CAAC,CAAC;4BACxD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;gCAC5B,MAAM,EAAE,GAAG;gCACX,UAAU,EAAE,cAAc;6BAC3B,CAAC,CAAC;yBACJ;;wBAGe,qBAAM,IAAA,8BAAoB,EAAC,MAAM,EAAE,kBAAkB,EAAE;gCACnE,aAAa,EAAE,KAAK;6BACrB,CAAC,EAAA;4BAHJ,uBACE,eAAY,GAAE,SAEZ;4BACF,OAAI,GAAE,IAAA,kCAAwB,EAAC,MAAM,EAAE,OAAO,EAAE,WAAW,CAAC;iCAC5D;;;;KACH,CAAC;AACJ,CAAC;AA/BD,8DA+BC"}

package/build/ts/{auth → server/authenticate}/public/types.d.ts

@@ -1,5 +1,8 @@
 import { JwtPayload } from '@shopify/shopify-api';
 import { EnsureCORSFunction } from '../helpers/ensure-cors-headers';
+export interface AuthenticatePublicOptions {
+    corsHeaders?: string[];
+}
 /**
  * Authenticated Context for a public request
  */
@@ -39,9 +42,11 @@ export interface PublicContext {
      *
      * export const loader = async ({ request }: LoaderArgs) => {
      *   const { sessionToken, cors } = await authenticate.public(
-     *     request
+     *     request,
+     *     { corsHeaders: ["X-My-Custom-Header"] }
      *   );
-     *   return cors(json(await getWidgets({shop: sessionToken.dest})));
+     *   const widgets = await getWidgets({shop: sessionToken.dest});
+     *   return cors(json(widgets));
      * };
      * ```
      */

package/build/ts/server/authenticate/public/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/public/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAEhD,OAAO,EAAC,kBAAkB,EAAC,MAAM,gCAAgC,CAAC;AAElE,MAAM,WAAW,yBAAyB;IACxC,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED;;GAEG;AACH,MAAM,WAAW,aAAa;IAC5B;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,YAAY,EAAE,UAAU,CAAC;IAEzB;;;;;;;;;;;;;;;;;;;;OAoBG;IACH,IAAI,EAAE,kBAAkB,CAAC;CAC1B"}

package/build/ts/server/authenticate/public/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/public/types.ts"],"names":[],"mappings":""}

package/build/ts/server/authenticate/webhooks/authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAa,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAEtE,OAAO,KAAK,EAAC,WAAW,EAAE,eAAe,EAAC,MAAM,aAAa,CAAC;AAE9D,OAAO,KAAK,EAAC,cAAc,EAAE,yBAAyB,EAAC,MAAM,SAAS,CAAC;AAEvE,wBAAgB,0BAA0B,CACxC,SAAS,SAAS,oBAAoB,EACtC,MAAM,SAAS,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,eAAe,EACzD,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,EAAE,WAAW,aAEvB,OAAO,KACf,QACD,eAAe,MAAM,CAAC,GAAG,0BAA0B,MAAM,EAAE,SAAS,CAAC,CACtE,CA+DF"}

package/build/ts/server/authenticate/webhooks/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/authenticate.ts"],"names":[],"mappings":";;;;AAMA,SAAgB,0BAA0B,CAGxC,EAAkC;QAAjC,GAAG,SAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAA;IACpB,OAAO,SAAe,YAAY,CAChC,OAAgB;;;;;;wBAIhB,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE;4BAC7B,MAAM,CAAC,KAAK,CACV,4EAA4E,EAC5E,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAC,CAC3C,CAAC;4BACF,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;gCAC5B,MAAM,EAAE,GAAG;gCACX,UAAU,EAAE,oBAAoB;6BACjC,CAAC,CAAC;yBACJ;wBAEe,qBAAM,OAAO,CAAC,IAAI,EAAE,EAAA;;wBAA9B,OAAO,GAAG,SAAoB;wBAEtB,qBAAM,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC;gCACxC,OAAO,SAAA;gCACP,UAAU,EAAE,OAAO;6BACpB,CAAC,EAAA;;wBAHI,KAAK,GAAG,SAGZ;wBAEF,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE;4BAChB,MAAM,CAAC,KAAK,CAAC,2BAA2B,EAAE,KAAK,CAAC,CAAC;4BACjD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,aAAa,EAAC,CAAC,CAAC;yBACzE;wBAEK,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;wBACzC,qBAAM,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,EAAA;;wBAA5D,OAAO,GAAG,SAAkD;wBAC5D,cAAc,GAA2B;4BAC7C,UAAU,EAAE,KAAK,CAAC,UAAU;4BAC5B,IAAI,EAAE,KAAK,CAAC,MAAM;4BAClB,KAAK,EAAE,KAAK,CAAC,KAAe;4BAC5B,SAAS,EAAE,KAAK,CAAC,SAAS;4BAC1B,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC;4BAC5B,OAAO,EAAE,SAAS;4BAClB,KAAK,EAAE,SAAS;yBACjB,CAAC;wBAEF,IAAI,CAAC,OAAO,EAAE;4BACZ,sBAAO,cAAc,EAAC;yBACvB;wBAEK,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC;4BACtC,OAAO,SAAA;4BACP,UAAU,EAAE,KAAK,CAAC,UAAwB;yBAC3C,CAAC,CAAC;wBAEG,aAAa,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;4BAC5C,OAAO,SAAA;4BACP,UAAU,EAAE,KAAK,CAAC,UAAwB;yBAC3C,CAAC,CAAC;wBAEH,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,OAAO,CAAC,UAAC,EAAgB;gCAAhB,KAAA,qBAAgB,EAAf,IAAI,QAAA,EAAE,QAAQ,QAAA;4BAC/C,OAAO,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,EAAE,QAAQ,CAAC,CAAC;wBAC1C,CAAC,CAAC,CAAC;wBAEH,4DACK,cAAc,KACjB,OAAO,SAAA,EACP,KAAK,EAAE;oCACL,IAAI,EAAE,UAA2C;oCACjD,OAAO,EAAE,aAAa;iCACvB,KACD;;;;KACH,CAAC;AACJ,CAAC;AAvED,gEAuEC"}

package/build/ts/server/authenticate/webhooks/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,uBAAuB,EAAC,MAAM,YAAY,CAAC"}

package/build/ts/server/authenticate/webhooks/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/index.ts"],"names":[],"mappings":";;;AAAA,uCAAmD;AAA3C,mHAAA,uBAAuB,OAAA"}

package/build/ts/server/authenticate/webhooks/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/register.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAE7C,OAAO,KAAK,EAAC,uBAAuB,EAAC,MAAM,SAAS,CAAC;AAErD,wBAAgB,uBAAuB,CAAC,EAAC,GAAG,EAAE,MAAM,EAAC,EAAE,WAAW,iBACd,uBAAuB,4DAuB1E"}

package/build/ts/server/authenticate/webhooks/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/register.ts"],"names":[],"mappings":";;;;AAIA,SAAgB,uBAAuB,CAAC,EAA0B;QAAzB,GAAG,SAAA,EAAE,MAAM,YAAA;IAClD,OAAO,SAAe,gBAAgB,CAAC,EAAkC;YAAjC,OAAO,aAAA;;;gBAC7C,sBAAO,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAC,OAAO,SAAA,EAAC,CAAC,CAAC,IAAI,CAAC,UAAC,QAAQ;wBACpD,MAAM,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,OAAO,CAAC,UAAC,EAAqB;gCAArB,KAAA,qBAAqB,EAApB,KAAK,QAAA,EAAE,YAAY,QAAA;4BACpD,YAAY,CAAC,OAAO,CAAC,UAAC,EAAkB;gCAAjB,IAAA,OAAO,aAAA,EAAK,IAAI,sBAAjB,WAAkB,CAAD;gCACrC,IAAI,OAAO,EAAE;oCACX,MAAM,CAAC,KAAK,CAAC,oBAAoB,EAAE;wCACjC,KAAK,OAAA;wCACL,IAAI,EAAE,OAAO,CAAC,IAAI;wCAClB,SAAS,EAAE,IAAI,CAAC,SAAS;qCAC1B,CAAC,CAAC;iCACJ;qCAAM;oCACL,MAAM,CAAC,KAAK,CAAC,4BAA4B,EAAE;wCACzC,KAAK,OAAA;wCACL,IAAI,EAAE,OAAO,CAAC,IAAI;wCAClB,MAAM,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,MAAM,CAAC;qCACpC,CAAC,CAAC;iCACJ;4BACH,CAAC,CAAC,CAAC;wBACL,CAAC,CAAC,CAAC;wBAEH,OAAO,QAAQ,CAAC;oBAClB,CAAC,CAAC,EAAC;;;KACJ,CAAC;AACJ,CAAC;AAxBD,0DAwBC"}

package/build/ts/server/authenticate/webhooks/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAE,OAAO,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE5E,OAAO,KAAK,EAAC,SAAS,EAAC,MAAM,aAAa,CAAC;AAE3C,MAAM,WAAW,uBAAuB;IACtC,OAAO,EAAE,OAAO,CAAC;CAClB;AAED,UAAU,OAAO,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM;IACjD,UAAU,EAAE,MAAM,CAAC;IACnB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,SAAS,CAAC;CACpB;AAED,MAAM,WAAW,cAAc,CAAC,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,CAC/D,SAAQ,OAAO,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,SAAS,CAAC;IACnB,KAAK,EAAE,SAAS,CAAC;CAClB;AAED,MAAM,WAAW,yBAAyB,CACxC,MAAM,GAAG,MAAM,GAAG,MAAM,GAAG,MAAM,EACjC,SAAS,SAAS,oBAAoB,GAAG,GAAG,CAC5C,SAAQ,OAAO,CAAC,MAAM,CAAC;IACvB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE;QACL,IAAI,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,CAAC,GAAG,SAAS,CAAC;QAC3D,OAAO,EAAE,YAAY,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;KACtD,CAAC;CACH"}

package/build/ts/server/authenticate/webhooks/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/webhooks/types.ts"],"names":[],"mappings":""}

package/build/ts/server/boundary/error.d.ts

@@ -0,0 +1,2 @@
+export declare function errorBoundary(error: any): import("react/jsx-runtime").JSX.Element;
+//# sourceMappingURL=error.d.ts.map

package/build/ts/server/boundary/error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.d.ts","sourceRoot":"","sources":["../../../../src/server/boundary/error.tsx"],"names":[],"mappings":"AAAA,wBAAgB,aAAa,CAAC,KAAK,EAAE,GAAG,2CAUvC"}

package/build/ts/{boundary → server/boundary}/error.js

@@ -1,9 +1,10 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.errorBoundary = void 0;
+var jsx_runtime_1 = require("react/jsx-runtime");
 function errorBoundary(error) {
     if (error.constructor.name === 'ErrorResponse') {
-        return 'Handling response';
+        return ((0, jsx_runtime_1.jsx)("div", { dangerouslySetInnerHTML: { __html: error.data || 'Handling response' } }));
     }
     throw error;
 }

package/build/ts/server/boundary/error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"error.js","sourceRoot":"","sources":["../../../../src/server/boundary/error.tsx"],"names":[],"mappings":";;;;AAAA,SAAgB,aAAa,CAAC,KAAU;IACtC,IAAI,KAAK,CAAC,WAAW,CAAC,IAAI,KAAK,eAAe,EAAE;QAC9C,OAAO,CACL,gCACE,uBAAuB,EAAE,EAAC,MAAM,EAAE,KAAK,CAAC,IAAI,IAAI,mBAAmB,EAAC,GACpE,CACH,CAAC;KACH;IAED,MAAM,KAAK,CAAC;AACd,CAAC;AAVD,sCAUC"}

package/build/ts/server/boundary/headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.d.ts","sourceRoot":"","sources":["../../../../src/server/boundary/headers.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,WAAW,EAAC,MAAM,2BAA2B,CAAC;AAEtD,wBAAgB,eAAe,CAAC,OAAO,EAAE,WAAW,GAAG,OAAO,CAY7D"}

package/build/ts/server/boundary/headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"headers.js","sourceRoot":"","sources":["../../../../src/server/boundary/headers.ts"],"names":[],"mappings":";;;;AAEA,SAAgB,eAAe,CAAC,OAAoB;IAC3C,IAAA,aAAa,GAAgD,OAAO,cAAvD,EAAE,aAAa,GAAiC,OAAO,cAAxC,EAAE,aAAa,GAAkB,OAAO,cAAzB,EAAE,YAAY,GAAI,OAAO,aAAX,CAAY;IAE5E,IAAI,YAAY,IAAI,KAAK,CAAC,IAAI,CAAC,YAAY,CAAC,OAAO,EAAE,CAAC,CAAC,MAAM,GAAG,CAAC,EAAE;QACjE,OAAO,YAAY,CAAC;KACrB;IAED,OAAO,IAAI,OAAO,sFACb,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,0BAC1D,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,0BAC1D,CAAC,aAAa,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,UAC7D,CAAC;AACL,CAAC;AAZD,0CAYC"}