@shopify/shopify-app-remix 1.1.0 → 1.2.1

package/build/cjs/server/authenticate/admin/authenticate.js

@@ -497,21 +497,17 @@ class AuthStrategy {
   }
   redirectToBouncePage(url) {
     const {
-      api,
       config
     } = this;
 
-    // eslint-disable-next-line no-warning-comments
-    // TODO this is to work around a remix bug
-    // https://github.com/orgs/Shopify/projects/6899/views/1?pane=issue&itemId=28376650
-    url.protocol = `${api.config.hostScheme}:`;
-    const params = new URLSearchParams(url.search);
-    params.set('shopify-reload', url.href);
+    // Make sure we always point to the configured app URL so it also works behind reverse proxies (that alter the Host
+    // header).
+    url.searchParams.set('shopify-reload', `${config.appUrl}${url.pathname}${url.search}`);
 
     // eslint-disable-next-line no-warning-comments
     // TODO Make sure this works on chrome without a tunnel (weird HTTPS redirect issue)
     // https://github.com/orgs/Shopify/projects/6899/views/1?pane=issue&itemId=28376650
-    throw serverRuntime.redirect(`${config.auth.patchSessionTokenPath}?${params.toString()}`);
+    throw serverRuntime.redirect(`${config.auth.patchSessionTokenPath}${url.search}`);
   }
   createBillingContext(request$1, session) {
     const {

package/build/cjs/server/authenticate/login/login.js

@@ -26,7 +26,7 @@ function loginFactory(params) {
         shop: types.LoginErrorType.MissingShop
       };
     }
-    const shopWithoutProtocol = shop.replace(/^https?:\/\//, '');
+    const shopWithoutProtocol = shop.replace(/^https?:\/\//, '').replace(/\/$/, '');
     const shopWithDomain = (shop === null || shop === void 0 ? void 0 : shop.indexOf('.')) === -1 ? `${shopWithoutProtocol}.myshopify.com` : shopWithoutProtocol;
     const sanitizedShop = api.utils.sanitizeShop(shopWithDomain);
     if (!sanitizedShop) {

package/build/cjs/server/authenticate/public/appProxy/authenticate.js

@@ -0,0 +1,82 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var factory = require('../../../clients/admin/factory.js');
+
+function authenticateAppProxyFactory(params) {
+  const {
+    api,
+    config,
+    logger
+  } = params;
+  return async function authenticate(request) {
+    logger.info('Authenticating app proxy request');
+    const {
+      searchParams
+    } = new URL(request.url);
+    const query = Object.fromEntries(searchParams.entries());
+    let isValid = false;
+    try {
+      isValid = await api.utils.validateHmac(query, {
+        signator: 'appProxy'
+      });
+    } catch (error) {
+      logger.info(error.message);
+      throw new Response(undefined, {
+        status: 400,
+        statusText: 'Bad Request'
+      });
+    }
+    if (!isValid) {
+      logger.info('App proxy request has invalid signature');
+      throw new Response(undefined, {
+        status: 400,
+        statusText: 'Bad Request'
+      });
+    }
+    const shop = searchParams.get('shop');
+    const sessionId = api.session.getOfflineId(shop);
+    const session = await config.sessionStorage.loadSession(sessionId);
+    if (!session) {
+      const context = {
+        liquid,
+        session: undefined,
+        admin: undefined
+      };
+      return context;
+    }
+    const context = {
+      liquid,
+      session,
+      admin: factory.adminClientFactory({
+        params,
+        session
+      })
+    };
+    return context;
+  };
+}
+const liquid = (body, initAndOptions) => {
+  if (typeof initAndOptions !== 'object') {
+    return new Response(body, {
+      status: initAndOptions || 200,
+      headers: {
+        'Content-Type': 'application/liquid'
+      }
+    });
+  }
+  const {
+    layout,
+    ...responseInit
+  } = initAndOptions || {};
+  const responseBody = layout === false ? `{% layout none %} ${body}` : body;
+  const headers = new Headers(responseInit.headers);
+  headers.set('Content-Type', 'application/liquid');
+  return new Response(responseBody, {
+    ...responseInit,
+    headers
+  });
+};
+
+exports.authenticateAppProxyFactory = authenticateAppProxyFactory;

package/build/cjs/server/authenticate/public/{authenticate.js → checkout/authenticate.js}

@@ -2,14 +2,14 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-var ensureCorsHeaders = require('../helpers/ensure-cors-headers.js');
-var validateSessionToken = require('../helpers/validate-session-token.js');
-var getSessionTokenHeader = require('../helpers/get-session-token-header.js');
-var rejectBotRequest = require('../helpers/reject-bot-request.js');
-var respondToOptionsRequest = require('../helpers/respond-to-options-request.js');
+var ensureCorsHeaders = require('../../helpers/ensure-cors-headers.js');
+var validateSessionToken = require('../../helpers/validate-session-token.js');
+var getSessionTokenHeader = require('../../helpers/get-session-token-header.js');
+var rejectBotRequest = require('../../helpers/reject-bot-request.js');
+var respondToOptionsRequest = require('../../helpers/respond-to-options-request.js');
 
-function authenticatePublicFactory(params) {
-  return async function authenticatePublic(request, options = {}) {
+function authenticateCheckoutFactory(params) {
+  return async function authenticateCheckout(request, options = {}) {
     var _options$corsHeaders;
     const {
       logger
@@ -18,7 +18,7 @@ function authenticatePublicFactory(params) {
     rejectBotRequest.rejectBotRequest(params, request);
     respondToOptionsRequest.respondToOptionsRequest(params, request, corsHeaders);
     const sessionTokenHeader = getSessionTokenHeader.getSessionTokenHeader(request);
-    logger.info('Authenticating public request');
+    logger.info('Authenticating checkout request');
     if (!sessionTokenHeader) {
       logger.debug('Request did not contain a session token');
       throw new Response(undefined, {
@@ -35,4 +35,4 @@ function authenticatePublicFactory(params) {
   };
 }
 
-exports.authenticatePublicFactory = authenticatePublicFactory;
+exports.authenticateCheckoutFactory = authenticateCheckoutFactory;

package/build/cjs/server/authenticate/public/factory.js

@@ -0,0 +1,22 @@
+'use strict';
+
+Object.defineProperty(exports, '__esModule', { value: true });
+
+var authenticate$1 = require('./checkout/authenticate.js');
+var authenticate = require('./appProxy/authenticate.js');
+
+function authenticatePublicFactory(params) {
+  const {
+    logger
+  } = params;
+  const authenticateCheckout = authenticate$1.authenticateCheckoutFactory(params);
+  const authenticatePublic = (request, options) => {
+    logger.deprecated('2.0.0', 'authenticate.public() will be deprecated in v2. Use authenticate.public.checkout() instead.');
+    return authenticateCheckout(request, options);
+  };
+  authenticatePublic.checkout = authenticateCheckout;
+  authenticatePublic.appProxy = authenticate.authenticateAppProxyFactory(params);
+  return authenticatePublic;
+}
+
+exports.authenticatePublicFactory = authenticatePublicFactory;

package/build/cjs/server/shopify-app.js

@@ -7,14 +7,14 @@ var shopifyApi = require('@shopify/shopify-api');
 var types = require('./types.js');
 var version = require('./version.js');
 var register = require('./authenticate/webhooks/register.js');
-var authenticate$2 = require('./authenticate/admin/authenticate.js');
-var authenticate$1 = require('./authenticate/webhooks/authenticate.js');
-var authenticate = require('./authenticate/public/authenticate.js');
+var authenticate$1 = require('./authenticate/admin/authenticate.js');
+var authenticate = require('./authenticate/webhooks/authenticate.js');
 var overrideLogger = require('./override-logger.js');
 var addResponseHeaders = require('./authenticate/helpers/add-response-headers.js');
 require('isbot');
 var login = require('./authenticate/login/login.js');
-var factory = require('./unauthenticated/admin/factory.js');
+var factory$1 = require('./unauthenticated/admin/factory.js');
+var factory = require('./authenticate/public/factory.js');
 
 /**
  * Creates an object your app will use to interact with Shopify.
@@ -48,18 +48,18 @@ function shopifyApp(appConfig) {
     config,
     logger
   };
-  const oauth = new authenticate$2.AuthStrategy(params);
+  const oauth = new authenticate$1.AuthStrategy(params);
   const shopify = {
     sessionStorage: config.sessionStorage,
     addDocumentResponseHeaders: addResponseHeaders.addDocumentResponseHeadersFactory(params),
     registerWebhooks: register.registerWebhooksFactory(params),
     authenticate: {
       admin: oauth.authenticateAdmin.bind(oauth),
-      public: authenticate.authenticatePublicFactory(params),
-      webhook: authenticate$1.authenticateWebhookFactory(params)
+      public: factory.authenticatePublicFactory(params),
+      webhook: authenticate.authenticateWebhookFactory(params)
     },
     unauthenticated: {
-      admin: factory.unauthenticatedAdminContextFactory(params)
+      admin: factory$1.unauthenticatedAdminContextFactory(params)
     }
   };
   if (isAppStoreApp(shopify, appConfig) || isSingleMerchantApp(shopify, appConfig)) {

package/build/cjs/server/version.js

@@ -2,6 +2,6 @@
 
 Object.defineProperty(exports, '__esModule', { value: true });
 
-const SHOPIFY_REMIX_LIBRARY_VERSION = '1.1.0';
+const SHOPIFY_REMIX_LIBRARY_VERSION = '1.2.1';
 
 exports.SHOPIFY_REMIX_LIBRARY_VERSION = SHOPIFY_REMIX_LIBRARY_VERSION;

package/build/ts/server/__test-helpers/const.d.ts

@@ -0,0 +1,9 @@
+export declare const API_SECRET_KEY = "testApiSecretKey";
+export declare const API_KEY = "testApiKey";
+export declare const APP_URL = "https://my-test-app.myshopify.io";
+export declare const SHOPIFY_HOST = "totally-real-host.myshopify.io";
+export declare const BASE64_HOST: string;
+export declare const TEST_SHOP = "test-shop.myshopify.com";
+export declare const GRAPHQL_URL: string;
+export declare const USER_ID = 12345;
+//# sourceMappingURL=const.d.ts.map

package/build/ts/server/__test-helpers/const.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"const.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/const.ts"],"names":[],"mappings":"AAEA,eAAO,MAAM,cAAc,qBAAqB,CAAC;AACjD,eAAO,MAAM,OAAO,eAAe,CAAC;AACpC,eAAO,MAAM,OAAO,qCAAqC,CAAC;AAC1D,eAAO,MAAM,YAAY,mCAAmC,CAAC;AAC7D,eAAO,MAAM,WAAW,QAA+C,CAAC;AACxE,eAAO,MAAM,SAAS,4BAA4B,CAAC;AACnD,eAAO,MAAM,WAAW,QAAsE,CAAC;AAC/F,eAAO,MAAM,OAAO,QAAQ,CAAC"}

package/build/ts/server/__test-helpers/const.js

@@ -0,0 +1,13 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.USER_ID = exports.GRAPHQL_URL = exports.TEST_SHOP = exports.BASE64_HOST = exports.SHOPIFY_HOST = exports.APP_URL = exports.API_KEY = exports.API_SECRET_KEY = void 0;
+var shopify_api_1 = require("@shopify/shopify-api");
+exports.API_SECRET_KEY = 'testApiSecretKey';
+exports.API_KEY = 'testApiKey';
+exports.APP_URL = 'https://my-test-app.myshopify.io';
+exports.SHOPIFY_HOST = 'totally-real-host.myshopify.io';
+exports.BASE64_HOST = Buffer.from(exports.SHOPIFY_HOST).toString('base64');
+exports.TEST_SHOP = 'test-shop.myshopify.com';
+exports.GRAPHQL_URL = "https://".concat(exports.TEST_SHOP, "/admin/api/").concat(shopify_api_1.LATEST_API_VERSION, "/graphql.json");
+exports.USER_ID = 12345;
+//# sourceMappingURL=const.js.map

package/build/ts/server/__test-helpers/const.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"const.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/const.ts"],"names":[],"mappings":";;;AAAA,oDAAwD;AAE3C,QAAA,cAAc,GAAG,kBAAkB,CAAC;AACpC,QAAA,OAAO,GAAG,YAAY,CAAC;AACvB,QAAA,OAAO,GAAG,kCAAkC,CAAC;AAC7C,QAAA,YAAY,GAAG,gCAAgC,CAAC;AAChD,QAAA,WAAW,GAAG,MAAM,CAAC,IAAI,CAAC,oBAAY,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAC3D,QAAA,SAAS,GAAG,yBAAyB,CAAC;AACtC,QAAA,WAAW,GAAG,kBAAW,iBAAS,wBAAc,gCAAkB,kBAAe,CAAC;AAClF,QAAA,OAAO,GAAG,KAAK,CAAC"}

package/build/ts/server/__test-helpers/expect-admin-api-client.d.ts

@@ -0,0 +1,8 @@
+import { Session } from '@shopify/shopify-api';
+import { AdminApiContext } from '../config-types';
+export declare function expectAdminApiClient(factory: () => Promise<{
+    admin: AdminApiContext;
+    expectedSession: Session;
+    actualSession: Session;
+}>): void;
+//# sourceMappingURL=expect-admin-api-client.d.ts.map

package/build/ts/server/__test-helpers/expect-admin-api-client.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-admin-api-client.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-admin-api-client.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAC,MAAM,sBAAsB,CAAC;AAG7C,OAAO,EAAC,eAAe,EAAC,MAAM,iBAAiB,CAAC;AAOhD,wBAAgB,oBAAoB,CAClC,OAAO,EAAE,MAAM,OAAO,CAAC;IACrB,KAAK,EAAE,eAAe,CAAC;IACvB,eAAe,EAAE,OAAO,CAAC;IACzB,aAAa,EAAE,OAAO,CAAC;CACxB,CAAC,QAqGH"}

package/build/ts/server/__test-helpers/expect-admin-api-client.js

@@ -0,0 +1,165 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expectAdminApiClient = void 0;
+var tslib_1 = require("tslib");
+var __1 = require("..");
+var request_mock_1 = require("./request-mock");
+var const_1 = require("./const");
+var REQUEST_URL = "https://".concat(const_1.TEST_SHOP, "/admin/api/").concat(__1.LATEST_API_VERSION, "/customers.json");
+function expectAdminApiClient(factory) {
+    var _this = this;
+    it('REST client can perform GET requests', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var admin, response, _a;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, factory()];
+                case 1:
+                    admin = (_b.sent()).admin;
+                    return [4 /*yield*/, (0, request_mock_1.mockExternalRequest)({
+                            request: new Request(REQUEST_URL),
+                            response: new Response(JSON.stringify({ customers: [] })),
+                        })];
+                case 2:
+                    _b.sent();
+                    return [4 /*yield*/, admin.rest.get({ path: 'customers' })];
+                case 3:
+                    response = _b.sent();
+                    // THEN
+                    expect(response.status).toEqual(200);
+                    _a = expect;
+                    return [4 /*yield*/, response.json()];
+                case 4:
+                    _a.apply(void 0, [_b.sent()]).toEqual({ customers: [] });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('REST client can perform POST requests', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var admin, response, _a;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, factory()];
+                case 1:
+                    admin = (_b.sent()).admin;
+                    return [4 /*yield*/, (0, request_mock_1.mockExternalRequest)({
+                            request: new Request(REQUEST_URL, { method: 'POST' }),
+                            response: new Response(JSON.stringify({ customers: [] })),
+                        })];
+                case 2:
+                    _b.sent();
+                    return [4 /*yield*/, admin.rest.post({
+                            path: '/customers.json',
+                            data: '',
+                        })];
+                case 3:
+                    response = _b.sent();
+                    // THEN
+                    expect(response.status).toEqual(200);
+                    _a = expect;
+                    return [4 /*yield*/, response.json()];
+                case 4:
+                    _a.apply(void 0, [_b.sent()]).toEqual({ customers: [] });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('REST client can perform PUT requests', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var admin, response, _a;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, factory()];
+                case 1:
+                    admin = (_b.sent()).admin;
+                    return [4 /*yield*/, (0, request_mock_1.mockExternalRequest)({
+                            request: new Request(REQUEST_URL, { method: 'PUT' }),
+                            response: new Response(JSON.stringify({ customers: [] })),
+                        })];
+                case 2:
+                    _b.sent();
+                    return [4 /*yield*/, admin.rest.put({
+                            path: '/customers.json',
+                            data: '',
+                        })];
+                case 3:
+                    response = _b.sent();
+                    // THEN
+                    expect(response.status).toEqual(200);
+                    _a = expect;
+                    return [4 /*yield*/, response.json()];
+                case 4:
+                    _a.apply(void 0, [_b.sent()]).toEqual({ customers: [] });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('REST client can perform DELETE requests', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var admin, response, _a;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, factory()];
+                case 1:
+                    admin = (_b.sent()).admin;
+                    return [4 /*yield*/, (0, request_mock_1.mockExternalRequest)({
+                            request: new Request(REQUEST_URL, { method: 'DELETE' }),
+                            response: new Response(JSON.stringify({ customers: [] })),
+                        })];
+                case 2:
+                    _b.sent();
+                    return [4 /*yield*/, admin.rest.delete({ path: '/customers.json' })];
+                case 3:
+                    response = _b.sent();
+                    // THEN
+                    expect(response.status).toEqual(200);
+                    _a = expect;
+                    return [4 /*yield*/, response.json()];
+                case 4:
+                    _a.apply(void 0, [_b.sent()]).toEqual({ customers: [] });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('GraphQL client can perform requests', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var _a, admin, actualSession, response, _b;
+        return tslib_1.__generator(this, function (_c) {
+            switch (_c.label) {
+                case 0: return [4 /*yield*/, factory()];
+                case 1:
+                    _a = _c.sent(), admin = _a.admin, actualSession = _a.actualSession;
+                    return [4 /*yield*/, (0, request_mock_1.mockExternalRequest)({
+                            request: new Request("https://".concat(const_1.TEST_SHOP, "/admin/api/").concat(__1.LATEST_API_VERSION, "/graphql.json"), {
+                                method: 'POST',
+                                headers: { 'X-Shopify-Access-Token': actualSession.accessToken },
+                            }),
+                            response: new Response(JSON.stringify({ shop: { name: 'Test shop' } })),
+                        })];
+                case 2:
+                    _c.sent();
+                    return [4 /*yield*/, admin.graphql('{ shop { name } }')];
+                case 3:
+                    response = _c.sent();
+                    // THEN
+                    expect(response.status).toEqual(200);
+                    _b = expect;
+                    return [4 /*yield*/, response.json()];
+                case 4:
+                    _b.apply(void 0, [_c.sent()]).toEqual({ shop: { name: 'Test shop' } });
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+    it('returns a session object as part of the context', function () { return tslib_1.__awaiter(_this, void 0, void 0, function () {
+        var _a, expectedSession, actualSession;
+        return tslib_1.__generator(this, function (_b) {
+            switch (_b.label) {
+                case 0: return [4 /*yield*/, factory()];
+                case 1:
+                    _a = _b.sent(), expectedSession = _a.expectedSession, actualSession = _a.actualSession;
+                    // THEN
+                    expect(expectedSession).toEqual(actualSession);
+                    return [2 /*return*/];
+            }
+        });
+    }); });
+}
+exports.expectAdminApiClient = expectAdminApiClient;
+//# sourceMappingURL=expect-admin-api-client.js.map

package/build/ts/server/__test-helpers/expect-admin-api-client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-admin-api-client.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-admin-api-client.ts"],"names":[],"mappings":";;;;AAEA,wBAAsC;AAGtC,+CAAmD;AACnD,iCAAkC;AAElC,IAAM,WAAW,GAAG,kBAAW,iBAAS,wBAAc,sBAAkB,oBAAiB,CAAC;AAE1F,SAAgB,oBAAoB,CAClC,OAIE;IALJ,iBA0GC;IAnGC,EAAE,CAAC,sCAAsC,EAAE;;;;wBAEzB,qBAAM,OAAO,EAAE,EAAA;;oBAAxB,KAAK,GAAI,CAAA,SAAe,CAAA,MAAnB;oBACZ,qBAAM,IAAA,kCAAmB,EAAC;4BACxB,OAAO,EAAE,IAAI,OAAO,CAAC,WAAW,CAAC;4BACjC,QAAQ,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;yBACxD,CAAC,EAAA;;oBAHF,SAGE,CAAC;oBAGc,qBAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAC,IAAI,EAAE,WAAW,EAAC,CAAC,EAAA;;oBAApD,QAAQ,GAAG,SAAyC;oBAE1D,OAAO;oBACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,KAAA,MAAM,CAAA;oBAAC,qBAAM,QAAQ,CAAC,IAAI,EAAE,EAAA;;oBAA5B,kBAAO,SAAqB,EAAC,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE;;;;wBAE1B,qBAAM,OAAO,EAAE,EAAA;;oBAAxB,KAAK,GAAI,CAAA,SAAe,CAAA,MAAnB;oBACZ,qBAAM,IAAA,kCAAmB,EAAC;4BACxB,OAAO,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,EAAC,MAAM,EAAE,MAAM,EAAC,CAAC;4BACnD,QAAQ,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;yBACxD,CAAC,EAAA;;oBAHF,SAGE,CAAC;oBAGc,qBAAM,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC;4BACrC,IAAI,EAAE,iBAAiB;4BACvB,IAAI,EAAE,EAAE;yBACT,CAAC,EAAA;;oBAHI,QAAQ,GAAG,SAGf;oBAEF,OAAO;oBACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,KAAA,MAAM,CAAA;oBAAC,qBAAM,QAAQ,CAAC,IAAI,EAAE,EAAA;;oBAA5B,kBAAO,SAAqB,EAAC,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE;;;;wBAEzB,qBAAM,OAAO,EAAE,EAAA;;oBAAxB,KAAK,GAAI,CAAA,SAAe,CAAA,MAAnB;oBACZ,qBAAM,IAAA,kCAAmB,EAAC;4BACxB,OAAO,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,EAAC,MAAM,EAAE,KAAK,EAAC,CAAC;4BAClD,QAAQ,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;yBACxD,CAAC,EAAA;;oBAHF,SAGE,CAAC;oBAGc,qBAAM,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC;4BACpC,IAAI,EAAE,iBAAiB;4BACvB,IAAI,EAAE,EAAE;yBACT,CAAC,EAAA;;oBAHI,QAAQ,GAAG,SAGf;oBAEF,OAAO;oBACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,KAAA,MAAM,CAAA;oBAAC,qBAAM,QAAQ,CAAC,IAAI,EAAE,EAAA;;oBAA5B,kBAAO,SAAqB,EAAC,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE;;;;wBAE5B,qBAAM,OAAO,EAAE,EAAA;;oBAAxB,KAAK,GAAI,CAAA,SAAe,CAAA,MAAnB;oBACZ,qBAAM,IAAA,kCAAmB,EAAC;4BACxB,OAAO,EAAE,IAAI,OAAO,CAAC,WAAW,EAAE,EAAC,MAAM,EAAE,QAAQ,EAAC,CAAC;4BACrD,QAAQ,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;yBACxD,CAAC,EAAA;;oBAHF,SAGE,CAAC;oBAGc,qBAAM,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,EAAC,IAAI,EAAE,iBAAiB,EAAC,CAAC,EAAA;;oBAA7D,QAAQ,GAAG,SAAkD;oBAEnE,OAAO;oBACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,KAAA,MAAM,CAAA;oBAAC,qBAAM,QAAQ,CAAC,IAAI,EAAE,EAAA;;oBAA5B,kBAAO,SAAqB,EAAC,CAAC,OAAO,CAAC,EAAC,SAAS,EAAE,EAAE,EAAC,CAAC,CAAC;;;;SACxD,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE;;;;wBAET,qBAAM,OAAO,EAAE,EAAA;;oBAAxC,KAAyB,SAAe,EAAvC,KAAK,WAAA,EAAE,aAAa,mBAAA;oBAC3B,qBAAM,IAAA,kCAAmB,EAAC;4BACxB,OAAO,EAAE,IAAI,OAAO,CAClB,kBAAW,iBAAS,wBAAc,sBAAkB,kBAAe,EACnE;gCACE,MAAM,EAAE,MAAM;gCACd,OAAO,EAAE,EAAC,wBAAwB,EAAE,aAAa,CAAC,WAAY,EAAC;6BAChE,CACF;4BACD,QAAQ,EAAE,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC,EAAC,CAAC,CAAC;yBACpE,CAAC,EAAA;;oBATF,SASE,CAAC;oBAGc,qBAAM,KAAK,CAAC,OAAO,CAAC,mBAAmB,CAAC,EAAA;;oBAAnD,QAAQ,GAAG,SAAwC;oBAEzD,OAAO;oBACP,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;oBACrC,KAAA,MAAM,CAAA;oBAAC,qBAAM,QAAQ,CAAC,IAAI,EAAE,EAAA;;oBAA5B,kBAAO,SAAqB,EAAC,CAAC,OAAO,CAAC,EAAC,IAAI,EAAE,EAAC,IAAI,EAAE,WAAW,EAAC,EAAC,CAAC,CAAC;;;;SACpE,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE;;;;wBAEX,qBAAM,OAAO,EAAE,EAAA;;oBAAlD,KAAmC,SAAe,EAAjD,eAAe,qBAAA,EAAE,aAAa,mBAAA;oBAErC,OAAO;oBACP,MAAM,CAAC,eAAe,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC;;;;SAChD,CAAC,CAAC;AACL,CAAC;AA1GD,oDA0GC"}

package/build/ts/server/__test-helpers/expect-begin-auth-redirect.d.ts

@@ -0,0 +1,3 @@
+import { testConfig } from './test-config';
+export declare function expectBeginAuthRedirect(config: ReturnType<typeof testConfig>, response: Response): void;
+//# sourceMappingURL=expect-begin-auth-redirect.d.ts.map

package/build/ts/server/__test-helpers/expect-begin-auth-redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-begin-auth-redirect.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-begin-auth-redirect.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,UAAU,EAAC,MAAM,eAAe,CAAC;AAEzC,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,UAAU,CAAC,OAAO,UAAU,CAAC,EACrC,QAAQ,EAAE,QAAQ,QAgBnB"}

package/build/ts/server/__test-helpers/expect-begin-auth-redirect.js

@@ -0,0 +1,16 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expectBeginAuthRedirect = void 0;
+var const_1 = require("./const");
+function expectBeginAuthRedirect(config, response) {
+    expect(response.status).toEqual(302);
+    var _a = new URL(response.headers.get('location')), hostname = _a.hostname, pathname = _a.pathname, searchParams = _a.searchParams;
+    expect(hostname).toBe(const_1.TEST_SHOP);
+    expect(pathname).toBe('/admin/oauth/authorize');
+    expect(searchParams.get('client_id')).toBe(config.apiKey);
+    expect(searchParams.get('scope')).toBe(config.scopes.toString());
+    expect(searchParams.get('redirect_uri')).toBe("".concat(config.appUrl, "/auth/callback"));
+    expect(searchParams.get('state')).toStrictEqual(expect.any(String));
+}
+exports.expectBeginAuthRedirect = expectBeginAuthRedirect;
+//# sourceMappingURL=expect-begin-auth-redirect.js.map

package/build/ts/server/__test-helpers/expect-begin-auth-redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-begin-auth-redirect.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-begin-auth-redirect.ts"],"names":[],"mappings":";;;AAAA,iCAAkC;AAGlC,SAAgB,uBAAuB,CACrC,MAAqC,EACrC,QAAkB;IAElB,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE/B,IAAA,KAAqC,IAAI,GAAG,CAChD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,CAClC,EAFM,QAAQ,cAAA,EAAE,QAAQ,cAAA,EAAE,YAAY,kBAEtC,CAAC;IAEF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,iBAAS,CAAC,CAAC;IACjC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;IAChD,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC1D,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,MAAO,CAAC,QAAQ,EAAE,CAAC,CAAC;IAClE,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,IAAI,CAC3C,UAAG,MAAM,CAAC,MAAM,mBAAgB,CACjC,CAAC;IACF,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;AACtE,CAAC;AAlBD,0DAkBC"}

package/build/ts/server/__test-helpers/expect-document-request-headers.d.ts

@@ -0,0 +1,2 @@
+export declare function expectDocumentRequestHeaders(response: Response, isEmbeddedApp?: boolean): void;
+//# sourceMappingURL=expect-document-request-headers.d.ts.map

package/build/ts/server/__test-helpers/expect-document-request-headers.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-document-request-headers.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-document-request-headers.ts"],"names":[],"mappings":"AAIA,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,QAAQ,EAClB,aAAa,UAAO,QAkBrB"}

package/build/ts/server/__test-helpers/expect-document-request-headers.js

@@ -0,0 +1,18 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expectDocumentRequestHeaders = void 0;
+var const_1 = require("../authenticate/const");
+var const_2 = require("./const");
+function expectDocumentRequestHeaders(response, isEmbeddedApp) {
+    if (isEmbeddedApp === void 0) { isEmbeddedApp = true; }
+    var headers = response.headers;
+    if (isEmbeddedApp) {
+        expect(headers.get('Content-Security-Policy')).toEqual("frame-ancestors https://".concat(encodeURIComponent(const_2.TEST_SHOP), " https://admin.shopify.com https://*.spin.dev;"));
+        expect(headers.get('Link')).toEqual("<".concat(const_1.APP_BRIDGE_URL, ">; rel=\"preload\"; as=\"script\";"));
+    }
+    else {
+        expect(headers.get('Content-Security-Policy')).toEqual("frame-ancestors 'none';");
+    }
+}
+exports.expectDocumentRequestHeaders = expectDocumentRequestHeaders;
+//# sourceMappingURL=expect-document-request-headers.js.map

package/build/ts/server/__test-helpers/expect-document-request-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-document-request-headers.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-document-request-headers.ts"],"names":[],"mappings":";;;AAAA,+CAAqD;AAErD,iCAAkC;AAElC,SAAgB,4BAA4B,CAC1C,QAAkB,EAClB,aAAoB;IAApB,8BAAA,EAAA,oBAAoB;IAEpB,IAAM,OAAO,GAAG,QAAQ,CAAC,OAAO,CAAC;IAEjC,IAAI,aAAa,EAAE;QACjB,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CACpD,kCAA2B,kBAAkB,CAC3C,iBAAS,CACV,mDAAgD,CAClD,CAAC;QACF,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,OAAO,CACjC,WAAI,sBAAc,uCAAgC,CACnD,CAAC;KACH;SAAM;QACL,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC,CAAC,CAAC,OAAO,CACpD,yBAAyB,CAC1B,CAAC;KACH;AACH,CAAC;AApBD,oEAoBC"}

package/build/ts/server/__test-helpers/expect-exit-iframe.d.ts

@@ -0,0 +1,8 @@
+interface ExpectExitIframeRedirectOptions {
+    shop?: string;
+    host?: string | null;
+    destination?: string;
+}
+export declare function expectExitIframeRedirect(response: Response, { shop, host, destination, }?: ExpectExitIframeRedirectOptions): void;
+export {};
+//# sourceMappingURL=expect-exit-iframe.d.ts.map

package/build/ts/server/__test-helpers/expect-exit-iframe.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-exit-iframe.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-exit-iframe.ts"],"names":[],"mappings":"AAEA,UAAU,+BAA+B;IACvC,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,wBAAgB,wBAAwB,CACtC,QAAQ,EAAE,QAAQ,EAClB,EACE,IAAgB,EAChB,IAAkB,EAClB,WAAkC,GACnC,GAAE,+BAAoC,QAgBxC"}

package/build/ts/server/__test-helpers/expect-exit-iframe.js

@@ -0,0 +1,17 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expectExitIframeRedirect = void 0;
+var const_1 = require("./const");
+function expectExitIframeRedirect(response, _a) {
+    var _b = _a === void 0 ? {} : _a, _c = _b.shop, shop = _c === void 0 ? const_1.TEST_SHOP : _c, _d = _b.host, host = _d === void 0 ? const_1.BASE64_HOST : _d, _e = _b.destination, destination = _e === void 0 ? "/auth?shop=".concat(shop) : _e;
+    expect(response.status).toBe(302);
+    var _f = new URL(response.headers.get('location'), const_1.APP_URL), pathname = _f.pathname, searchParams = _f.searchParams;
+    expect(pathname).toBe('/auth/exit-iframe');
+    expect(searchParams.get('shop')).toBe(shop);
+    expect(searchParams.get('exitIframe')).toBe(destination);
+    if (host) {
+        expect(searchParams.get('host')).toBe(host);
+    }
+}
+exports.expectExitIframeRedirect = expectExitIframeRedirect;
+//# sourceMappingURL=expect-exit-iframe.js.map

package/build/ts/server/__test-helpers/expect-exit-iframe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-exit-iframe.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-exit-iframe.ts"],"names":[],"mappings":";;;AAAA,iCAAwD;AAQxD,SAAgB,wBAAwB,CACtC,QAAkB,EAClB,EAIuC;QAJvC,qBAIqC,EAAE,KAAA,EAHrC,YAAgB,EAAhB,IAAI,mBAAG,iBAAS,KAAA,EAChB,YAAkB,EAAlB,IAAI,mBAAG,mBAAW,KAAA,EAClB,mBAAkC,EAAlC,WAAW,mBAAG,qBAAc,IAAI,CAAE,KAAA;IAGpC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE5B,IAAA,KAA2B,IAAI,GAAG,CACtC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,EACjC,eAAO,CACR,EAHM,QAAQ,cAAA,EAAE,YAAY,kBAG5B,CAAC;IACF,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;IAE3C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC5C,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;IAEzD,IAAI,IAAI,EAAE;QACR,MAAM,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;KAC7C;AACH,CAAC;AAtBD,4DAsBC"}

package/build/ts/server/__test-helpers/expect-login-redirect.d.ts

@@ -0,0 +1,2 @@
+export declare function expectLoginRedirect(response: Response): void;
+//# sourceMappingURL=expect-login-redirect.d.ts.map

package/build/ts/server/__test-helpers/expect-login-redirect.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-login-redirect.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-login-redirect.ts"],"names":[],"mappings":"AAEA,wBAAgB,mBAAmB,CAAC,QAAQ,EAAE,QAAQ,QAKrD"}

package/build/ts/server/__test-helpers/expect-login-redirect.js

@@ -0,0 +1,11 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.expectLoginRedirect = void 0;
+var const_1 = require("./const");
+function expectLoginRedirect(response) {
+    expect(response.status).toBe(302);
+    var pathname = new URL(response.headers.get('location'), const_1.APP_URL).pathname;
+    expect(pathname).toBe('/auth/login');
+}
+exports.expectLoginRedirect = expectLoginRedirect;
+//# sourceMappingURL=expect-login-redirect.js.map

package/build/ts/server/__test-helpers/expect-login-redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"expect-login-redirect.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/expect-login-redirect.ts"],"names":[],"mappings":";;;AAAA,iCAAgC;AAEhC,SAAgB,mBAAmB,CAAC,QAAkB;IACpD,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;IAE3B,IAAA,QAAQ,GAAI,IAAI,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,UAAU,CAAE,EAAE,eAAO,CAAC,SAAvD,CAAwD;IACvE,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;AACvC,CAAC;AALD,kDAKC"}

package/build/ts/server/__test-helpers/get-hmac.d.ts

@@ -0,0 +1,2 @@
+export declare function getHmac(body: string): string;
+//# sourceMappingURL=get-hmac.d.ts.map

package/build/ts/server/__test-helpers/get-hmac.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-hmac.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/get-hmac.ts"],"names":[],"mappings":"AAIA,wBAAgB,OAAO,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAK5C"}

package/build/ts/server/__test-helpers/get-hmac.js

@@ -0,0 +1,14 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.getHmac = void 0;
+var tslib_1 = require("tslib");
+var crypto_1 = tslib_1.__importDefault(require("crypto"));
+var const_1 = require("./const");
+function getHmac(body) {
+    return crypto_1.default
+        .createHmac('sha256', const_1.API_SECRET_KEY)
+        .update(body, 'utf8')
+        .digest('base64');
+}
+exports.getHmac = getHmac;
+//# sourceMappingURL=get-hmac.js.map

package/build/ts/server/__test-helpers/get-hmac.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-hmac.js","sourceRoot":"","sources":["../../../../src/server/__test-helpers/get-hmac.ts"],"names":[],"mappings":";;;;AAAA,0DAA4B;AAE5B,iCAAuC;AAEvC,SAAgB,OAAO,CAAC,IAAY;IAClC,OAAO,gBAAM;SACV,UAAU,CAAC,QAAQ,EAAE,sBAAc,CAAC;SACpC,MAAM,CAAC,IAAI,EAAE,MAAM,CAAC;SACpB,MAAM,CAAC,QAAQ,CAAC,CAAC;AACtB,CAAC;AALD,0BAKC"}

package/build/ts/server/__test-helpers/get-jwt.d.ts

@@ -0,0 +1,8 @@
+import { JwtPayload } from '@shopify/shopify-api';
+interface TestJwt {
+    token: string;
+    payload: JwtPayload;
+}
+export declare function getJwt(overrides?: Partial<JwtPayload>): TestJwt;
+export {};
+//# sourceMappingURL=get-jwt.d.ts.map

package/build/ts/server/__test-helpers/get-jwt.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"get-jwt.d.ts","sourceRoot":"","sources":["../../../../src/server/__test-helpers/get-jwt.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAC,MAAM,sBAAsB,CAAC;AAKhD,UAAU,OAAO;IACf,KAAK,EAAE,MAAM,CAAC;IACd,OAAO,EAAE,UAAU,CAAC;CACrB;AAED,wBAAgB,MAAM,CAAC,SAAS,GAAE,OAAO,CAAC,UAAU,CAAM,GAAG,OAAO,CAoBnE"}