@shopify/shopify-app-remix 2.3.0 → 2.5.0

package/build/ts/server/authenticate/admin/strategies/token-exchange.js

@@ -0,0 +1,163 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.TokenExchangeStrategy = void 0;
+var tslib_1 = require("tslib");
+var shopify_api_1 = require("@shopify/shopify-api");
+var helpers_1 = require("../../helpers");
+var helpers_2 = require("../helpers");
+var TokenExchangeStrategy = /** @class */ (function () {
+    function TokenExchangeStrategy(_a) {
+        var api = _a.api, config = _a.config, logger = _a.logger;
+        this.api = api;
+        this.config = config;
+        this.logger = logger;
+    }
+    TokenExchangeStrategy.prototype.respondToOAuthRequests = function (_request) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () { return tslib_1.__generator(this, function (_a) {
+            return [2 /*return*/];
+        }); });
+    };
+    TokenExchangeStrategy.prototype.authenticate = function (request, sessionContext) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var _a, api, config, logger, shop, session, sessionToken, offlineSession, newSession, onlineSession, error_1;
+            return tslib_1.__generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _a = this, api = _a.api, config = _a.config, logger = _a.logger;
+                        shop = sessionContext.shop, session = sessionContext.session, sessionToken = sessionContext.sessionToken;
+                        if (!sessionToken)
+                            throw new shopify_api_1.InvalidJwtError();
+                        if (!(!session || session.isExpired())) return [3 /*break*/, 9];
+                        logger.info('No valid session found');
+                        logger.info('Requesting offline access token');
+                        return [4 /*yield*/, this.exchangeToken({
+                                request: request,
+                                sessionToken: sessionToken,
+                                shop: shop,
+                                requestedTokenType: shopify_api_1.RequestedTokenType.OfflineAccessToken,
+                            })];
+                    case 1:
+                        offlineSession = (_b.sent()).session;
+                        return [4 /*yield*/, config.sessionStorage.storeSession(offlineSession)];
+                    case 2:
+                        _b.sent();
+                        newSession = offlineSession;
+                        if (!config.useOnlineTokens) return [3 /*break*/, 5];
+                        logger.info('Requesting online access token');
+                        return [4 /*yield*/, this.exchangeToken({
+                                request: request,
+                                sessionToken: sessionToken,
+                                shop: shop,
+                                requestedTokenType: shopify_api_1.RequestedTokenType.OnlineAccessToken,
+                            })];
+                    case 3:
+                        onlineSession = (_b.sent()).session;
+                        return [4 /*yield*/, config.sessionStorage.storeSession(onlineSession)];
+                    case 4:
+                        _b.sent();
+                        newSession = onlineSession;
+                        _b.label = 5;
+                    case 5:
+                        _b.trys.push([5, 7, , 8]);
+                        return [4 /*yield*/, this.handleAfterAuthHook({ api: api, config: config, logger: logger }, newSession, request, sessionToken)];
+                    case 6:
+                        _b.sent();
+                        return [3 /*break*/, 8];
+                    case 7:
+                        error_1 = _b.sent();
+                        throw new Response(undefined, {
+                            status: 500,
+                            statusText: 'Internal Server Error',
+                        });
+                    case 8: return [2 /*return*/, newSession];
+                    case 9: return [2 /*return*/, session];
+                }
+            });
+        });
+    };
+    TokenExchangeStrategy.prototype.handleClientError = function (request) {
+        var _this = this;
+        var _a = this, api = _a.api, config = _a.config, logger = _a.logger;
+        return (0, helpers_2.handleClientErrorFactory)({
+            request: request,
+            onError: function (_a) {
+                var session = _a.session, error = _a.error;
+                return tslib_1.__awaiter(_this, void 0, void 0, function () {
+                    return tslib_1.__generator(this, function (_b) {
+                        if (error.response.code === 401) {
+                            config.sessionStorage.deleteSession(session.id);
+                            (0, helpers_1.respondToInvalidSessionToken)({
+                                params: { config: config, api: api, logger: logger },
+                                request: request,
+                            });
+                        }
+                        return [2 /*return*/];
+                    });
+                });
+            },
+        });
+    };
+    TokenExchangeStrategy.prototype.exchangeToken = function (_a) {
+        var _b;
+        var request = _a.request, shop = _a.shop, sessionToken = _a.sessionToken, requestedTokenType = _a.requestedTokenType;
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var _c, api, config, logger, error_2;
+            return tslib_1.__generator(this, function (_d) {
+                switch (_d.label) {
+                    case 0:
+                        _c = this, api = _c.api, config = _c.config, logger = _c.logger;
+                        _d.label = 1;
+                    case 1:
+                        _d.trys.push([1, 3, , 4]);
+                        return [4 /*yield*/, api.auth.tokenExchange({
+                                sessionToken: sessionToken,
+                                shop: shop,
+                                requestedTokenType: requestedTokenType,
+                            })];
+                    case 2: return [2 /*return*/, _d.sent()];
+                    case 3:
+                        error_2 = _d.sent();
+                        if (error_2 instanceof shopify_api_1.InvalidJwtError ||
+                            (error_2 instanceof shopify_api_1.HttpResponseError &&
+                                error_2.response.code === 400 &&
+                                ((_b = error_2.response.body) === null || _b === void 0 ? void 0 : _b.error) === 'invalid_subject_token')) {
+                            throw (0, helpers_1.respondToInvalidSessionToken)({
+                                params: { api: api, config: config, logger: logger },
+                                request: request,
+                                retryRequest: true,
+                            });
+                        }
+                        throw new Response(undefined, {
+                            status: 500,
+                            statusText: 'Internal Server Error',
+                        });
+                    case 4: return [2 /*return*/];
+                }
+            });
+        });
+    };
+    TokenExchangeStrategy.prototype.handleAfterAuthHook = function (params, session, request, sessionToken) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var config;
+            var _this = this;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        config = params.config;
+                        return [4 /*yield*/, config.idempotentPromiseHandler.handlePromise({
+                                promiseFunction: function () {
+                                    return (0, helpers_2.triggerAfterAuthHook)(params, session, request, _this);
+                                },
+                                identifier: sessionToken,
+                            })];
+                    case 1:
+                        _a.sent();
+                        return [2 /*return*/];
+                }
+            });
+        });
+    };
+    return TokenExchangeStrategy;
+}());
+exports.TokenExchangeStrategy = TokenExchangeStrategy;
+//# sourceMappingURL=token-exchange.js.map

package/build/ts/server/authenticate/admin/strategies/token-exchange.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"token-exchange.js","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/strategies/token-exchange.ts"],"names":[],"mappings":";;;;AAAA,oDAO8B;AAQ9B,yCAA2D;AAC3D,sCAA0E;AAK1E;IAYE,+BAAmB,EAAoD;YAAnD,GAAG,SAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAA;QACrC,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;QACf,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;IACvB,CAAC;IAEY,sDAAsB,GAAnC,UAAoC,QAAiB;;;;KAAmB;IAE3D,4CAAY,GAAzB,UACE,OAAgB,EAChB,cAA8B;;;;;;wBAExB,KAAwB,IAAI,EAA3B,GAAG,SAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAA,CAAS;wBAC5B,IAAI,GAA2B,cAAc,KAAzC,EAAE,OAAO,GAAkB,cAAc,QAAhC,EAAE,YAAY,GAAI,cAAc,aAAlB,CAAmB;wBAErD,IAAI,CAAC,YAAY;4BAAE,MAAM,IAAI,6BAAe,EAAE,CAAC;6BAE3C,CAAA,CAAC,OAAO,IAAI,OAAO,CAAC,SAAS,EAAE,CAAA,EAA/B,wBAA+B;wBACjC,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;wBACtC,MAAM,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAC;wBACb,qBAAM,IAAI,CAAC,aAAa,CAAC;gCACzD,OAAO,SAAA;gCACP,YAAY,cAAA;gCACZ,IAAI,MAAA;gCACJ,kBAAkB,EAAE,gCAAkB,CAAC,kBAAkB;6BAC1D,CAAC,EAAA;;wBALc,cAAc,GAAI,CAAA,SAKhC,CAAA,QAL4B;wBAO9B,qBAAM,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,cAAc,CAAC,EAAA;;wBAAxD,SAAwD,CAAC;wBAErD,UAAU,GAAG,cAAc,CAAC;6BAE5B,MAAM,CAAC,eAAe,EAAtB,wBAAsB;wBACxB,MAAM,CAAC,IAAI,CAAC,gCAAgC,CAAC,CAAC;wBACb,qBAAM,IAAI,CAAC,aAAa,CAAC;gCACxD,OAAO,SAAA;gCACP,YAAY,cAAA;gCACZ,IAAI,MAAA;gCACJ,kBAAkB,EAAE,gCAAkB,CAAC,iBAAiB;6BACzD,CAAC,EAAA;;wBALc,aAAa,GAAI,CAAA,SAK/B,CAAA,QAL2B;wBAO7B,qBAAM,MAAM,CAAC,cAAc,CAAC,YAAY,CAAC,aAAa,CAAC,EAAA;;wBAAvD,SAAuD,CAAC;wBACxD,UAAU,GAAG,aAAa,CAAC;;;;wBAI3B,qBAAM,IAAI,CAAC,mBAAmB,CAC5B,EAAC,GAAG,KAAA,EAAE,MAAM,QAAA,EAAE,MAAM,QAAA,EAAC,EACrB,UAAU,EACV,OAAO,EACP,YAAY,CACb,EAAA;;wBALD,SAKC,CAAC;;;;wBAEF,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;4BAC5B,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,uBAAuB;yBACpC,CAAC,CAAC;4BAGL,sBAAO,UAAU,EAAC;4BAGpB,sBAAO,OAAQ,EAAC;;;;KACjB;IAEM,iDAAiB,GAAxB,UAAyB,OAAgB;QAAzC,iBAeC;QAdO,IAAA,KAAwB,IAAI,EAA3B,GAAG,SAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAQ,CAAC;QACnC,OAAO,IAAA,kCAAwB,EAAC;YAC9B,OAAO,SAAA;YACP,OAAO,EAAE,UAAO,EAAgC;oBAA/B,OAAO,aAAA,EAAE,KAAK,WAAA;;;wBAC7B,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE,CAAC;4BAChC,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;4BAEhD,IAAA,sCAA4B,EAAC;gCAC3B,MAAM,EAAE,EAAC,MAAM,QAAA,EAAE,GAAG,KAAA,EAAE,MAAM,QAAA,EAAC;gCAC7B,OAAO,SAAA;6BACR,CAAC,CAAC;wBACL,CAAC;;;;aACF;SACF,CAAC,CAAC;IACL,CAAC;IAEa,6CAAa,GAA3B,UAA4B,EAU3B;;YATC,OAAO,aAAA,EACP,IAAI,UAAA,EACJ,YAAY,kBAAA,EACZ,kBAAkB,wBAAA;;;;;;wBAOZ,KAAwB,IAAI,EAA3B,GAAG,SAAA,EAAE,MAAM,YAAA,EAAE,MAAM,YAAA,CAAS;;;;wBAG1B,qBAAM,GAAG,CAAC,IAAI,CAAC,aAAa,CAAC;gCAClC,YAAY,cAAA;gCACZ,IAAI,MAAA;gCACJ,kBAAkB,oBAAA;6BACnB,CAAC,EAAA;4BAJF,sBAAO,SAIL,EAAC;;;wBAEH,IACE,OAAK,YAAY,6BAAe;4BAChC,CAAC,OAAK,YAAY,+BAAiB;gCACjC,OAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG;gCAC3B,CAAA,MAAA,OAAK,CAAC,QAAQ,CAAC,IAAI,0CAAE,KAAK,MAAK,uBAAuB,CAAC,EACzD,CAAC;4BACD,MAAM,IAAA,sCAA4B,EAAC;gCACjC,MAAM,EAAE,EAAC,GAAG,KAAA,EAAE,MAAM,QAAA,EAAE,MAAM,QAAA,EAAC;gCAC7B,OAAO,SAAA;gCACP,YAAY,EAAE,IAAI;6BACnB,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;4BAC5B,MAAM,EAAE,GAAG;4BACX,UAAU,EAAE,uBAAuB;yBACpC,CAAC,CAAC;;;;;KAEN;IAEa,mDAAmB,GAAjC,UACE,MAAmB,EACnB,OAAgB,EAChB,OAAgB,EAChB,YAAoB;;;;;;;wBAEb,MAAM,GAAI,MAAM,OAAV,CAAW;wBACxB,qBAAM,MAAM,CAAC,wBAAwB,CAAC,aAAa,CAAC;gCAClD,eAAe,EAAE;oCACf,OAAO,IAAA,8BAAoB,EAAC,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAI,CAAC,CAAC;gCAC9D,CAAC;gCACD,UAAU,EAAE,YAAY;6BACzB,CAAC,EAAA;;wBALF,SAKE,CAAC;;;;;KACJ;IACH,4BAAC;AAAD,CAAC,AAnJD,IAmJC;AAnJY,sDAAqB"}

package/build/ts/server/authenticate/admin/strategies/types.d.ts

@@ -1,11 +1,22 @@
-import { JwtPayload, Session } from '@shopify/shopify-api';
-export interface SessionTokenContext {
+import { HttpResponseError, Session } from '@shopify/shopify-api';
+import { HandleAdminClientError } from '../../../clients';
+export interface SessionContext {
     shop: string;
-    sessionId?: string;
-    payload?: JwtPayload;
+    session?: Session;
+    sessionToken?: string;
+}
+export interface OnErrorOptions {
+    request: Request;
+    session: Session;
+    error: HttpResponseError;
+}
+export interface HandleClientErrorOptions {
+    request: Request;
+    onError?: ({ session, error }: OnErrorOptions) => Promise<void | never>;
 }
 export interface AuthorizationStrategy {
     respondToOAuthRequests: (request: Request) => Promise<void | never>;
-    authenticate: (request: Request, session: Session | undefined, shop: string) => Promise<Session | never>;
+    authenticate: (request: Request, sessionContext: SessionContext) => Promise<Session | never>;
+    handleClientError: (request: Request) => HandleAdminClientError;
 }
 //# sourceMappingURL=types.d.ts.map

package/build/ts/server/authenticate/admin/strategies/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/strategies/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,OAAO,EAAC,MAAM,sBAAsB,CAAC;AAEzD,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,UAAU,CAAC;CACtB;AAED,MAAM,WAAW,qBAAqB;IACpC,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;IACpE,YAAY,EAAE,CACZ,OAAO,EAAE,OAAO,EAChB,OAAO,EAAE,OAAO,GAAG,SAAS,EAC5B,IAAI,EAAE,MAAM,KACT,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;CAC/B"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../../src/server/authenticate/admin/strategies/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,iBAAiB,EAAE,OAAO,EAAC,MAAM,sBAAsB,CAAC;AAEhE,OAAO,EAAC,sBAAsB,EAAC,MAAM,kBAAkB,CAAC;AAExD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,CAAC;CACvB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,EAAE,iBAAiB,CAAC;CAC1B;AAED,MAAM,WAAW,wBAAwB;IACvC,OAAO,EAAE,OAAO,CAAC;IACjB,OAAO,CAAC,EAAE,CAAC,EAAC,OAAO,EAAE,KAAK,EAAC,EAAE,cAAc,KAAK,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;CACvE;AAED,MAAM,WAAW,qBAAqB;IACpC,sBAAsB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC;IACpE,YAAY,EAAE,CACZ,OAAO,EAAE,OAAO,EAChB,cAAc,EAAE,cAAc,KAC3B,OAAO,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC;IAC9B,iBAAiB,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,sBAAsB,CAAC;CACjE"}

package/build/ts/server/authenticate/admin/types.d.ts

@@ -171,9 +171,5 @@ export interface NonEmbeddedAdminContext<Config extends AppConfigArg, Resources
 }
 export type AdminContext<Config extends AppConfigArg, Resources extends ShopifyRestResources = ShopifyRestResources> = Config['isEmbeddedApp'] extends false ? NonEmbeddedAdminContext<Config, Resources> : EmbeddedAdminContext<Config, Resources>;
 export type AuthenticateAdmin<Config extends AppConfigArg, Resources extends ShopifyRestResources = ShopifyRestResources> = (request: Request) => Promise<AdminContext<Config, Resources>>;
-export interface SessionContext {
-    session: Session;
-    token?: JwtPayload;
-}
 export {};
 //# sourceMappingURL=types.d.ts.map

package/build/ts/server/authenticate/admin/types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/admin/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAC,kBAAkB,EAAC,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AAEpD,UAAU,oBAAoB,CAC5B,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB;IAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyDG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAElC;;;;OAIG;IACH,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB,CACnC,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,CAC7D,SAAQ,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC;IAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,YAAY,EAAE,UAAU,CAAC;IAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AACD,MAAM,WAAW,uBAAuB,CACtC,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,CAC7D,SAAQ,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC;CAAG;AAEpD,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,IAC3D,MAAM,CAAC,eAAe,CAAC,SAAS,KAAK,GACrC,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,GAC1C,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAE5C,MAAM,MAAM,iBAAiB,CAC3B,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,IAC3D,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC;AAEnE,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,CAAC;IACjB,KAAK,CAAC,EAAE,UAAU,CAAC;CACpB"}
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/admin/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,UAAU,EAAE,OAAO,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAE/E,OAAO,EAAC,kBAAkB,EAAC,MAAM,gCAAgC,CAAC;AAClE,OAAO,KAAK,EAAC,YAAY,EAAC,MAAM,oBAAoB,CAAC;AACrD,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAEnD,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,iBAAiB,CAAC;AACpD,OAAO,EAAC,gBAAgB,EAAC,MAAM,oBAAoB,CAAC;AAEpD,UAAU,oBAAoB,CAC5B,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB;IAE7D;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAyDG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;OAEG;IACH,KAAK,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;IAElC;;;;OAIG;IACH,OAAO,EAAE,cAAc,CAAC,MAAM,CAAC,CAAC;IAEhC;;;;;;;;;;;;;;;;;OAiBG;IACH,IAAI,EAAE,kBAAkB,CAAC;CAC1B;AAED,MAAM,WAAW,oBAAoB,CACnC,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,CAC7D,SAAQ,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC;IAC/C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAkCG;IACH,YAAY,EAAE,UAAU,CAAC;IAEzB;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAiCG;IACH,QAAQ,EAAE,gBAAgB,CAAC;CAC5B;AACD,MAAM,WAAW,uBAAuB,CACtC,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,CAC7D,SAAQ,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC;CAAG;AAEpD,MAAM,MAAM,YAAY,CACtB,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,IAC3D,MAAM,CAAC,eAAe,CAAC,SAAS,KAAK,GACrC,uBAAuB,CAAC,MAAM,EAAE,SAAS,CAAC,GAC1C,oBAAoB,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;AAE5C,MAAM,MAAM,iBAAiB,CAC3B,MAAM,SAAS,YAAY,EAC3B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,IAC3D,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,YAAY,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC,CAAC"}

package/build/ts/server/authenticate/const.d.ts

@@ -1,5 +1,8 @@
 export declare const APP_BRIDGE_URL = "https://cdn.shopify.com/shopifycloud/app-bridge.js";
 export declare const REAUTH_URL_HEADER = "X-Shopify-API-Request-Failure-Reauthorize-Url";
+export declare const RETRY_INVALID_SESSION_HEADER: {
+    'X-Shopify-Retry-Invalid-Session-Request': string;
+};
 export declare const CORS_HEADERS: {
     'Access-Control-Allow-Origin': string;
     'Access-Control-Allow-Headers': string;

package/build/ts/server/authenticate/const.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"const.d.ts","sourceRoot":"","sources":["../../../../src/server/authenticate/const.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,uDAC2B,CAAC;AAEvD,eAAO,MAAM,iBAAiB,kDACmB,CAAC;AAElD,eAAO,MAAM,YAAY;;;;CAIxB,CAAC"}
+{"version":3,"file":"const.d.ts","sourceRoot":"","sources":["../../../../src/server/authenticate/const.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,cAAc,uDAC2B,CAAC;AAEvD,eAAO,MAAM,iBAAiB,kDACmB,CAAC;AAElD,eAAO,MAAM,4BAA4B;;CAExC,CAAC;AAEF,eAAO,MAAM,YAAY;;;;CAIxB,CAAC"}

package/build/ts/server/authenticate/const.js

@@ -1,8 +1,11 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.CORS_HEADERS = exports.REAUTH_URL_HEADER = exports.APP_BRIDGE_URL = void 0;
+exports.CORS_HEADERS = exports.RETRY_INVALID_SESSION_HEADER = exports.REAUTH_URL_HEADER = exports.APP_BRIDGE_URL = void 0;
 exports.APP_BRIDGE_URL = 'https://cdn.shopify.com/shopifycloud/app-bridge.js';
 exports.REAUTH_URL_HEADER = 'X-Shopify-API-Request-Failure-Reauthorize-Url';
+exports.RETRY_INVALID_SESSION_HEADER = {
+    'X-Shopify-Retry-Invalid-Session-Request': '1',
+};
 exports.CORS_HEADERS = {
     'Access-Control-Allow-Origin': '*',
     'Access-Control-Allow-Headers': 'Authorization',

package/build/ts/server/authenticate/const.js.map

@@ -1 +1 @@
-{"version":3,"file":"const.js","sourceRoot":"","sources":["../../../../src/server/authenticate/const.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GACzB,oDAAoD,CAAC;AAE1C,QAAA,iBAAiB,GAC5B,+CAA+C,CAAC;AAErC,QAAA,YAAY,GAAG;IAC1B,6BAA6B,EAAE,GAAG;IAClC,8BAA8B,EAAE,eAAe;IAC/C,+BAA+B,EAAE,yBAAiB;CACnD,CAAC"}
+{"version":3,"file":"const.js","sourceRoot":"","sources":["../../../../src/server/authenticate/const.ts"],"names":[],"mappings":";;;AAAa,QAAA,cAAc,GACzB,oDAAoD,CAAC;AAE1C,QAAA,iBAAiB,GAC5B,+CAA+C,CAAC;AAErC,QAAA,4BAA4B,GAAG;IAC1C,yCAAyC,EAAE,GAAG;CAC/C,CAAC;AAEW,QAAA,YAAY,GAAG;IAC1B,6BAA6B,EAAE,GAAG;IAClC,8BAA8B,EAAE,eAAe;IAC/C,+BAA+B,EAAE,yBAAiB;CACnD,CAAC"}

package/build/ts/server/authenticate/flow/authenticate.d.ts

@@ -0,0 +1,5 @@
+import { ShopifyRestResources } from '@shopify/shopify-api';
+import { BasicParams } from '../../types';
+import type { AuthenticateFlow } from './types';
+export declare function authenticateFlowFactory<Resources extends ShopifyRestResources = ShopifyRestResources>(params: BasicParams): AuthenticateFlow<Resources>;
+//# sourceMappingURL=authenticate.d.ts.map

package/build/ts/server/authenticate/flow/authenticate.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/flow/authenticate.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAG1D,OAAO,EAAC,WAAW,EAAC,MAAM,aAAa,CAAC;AAExC,OAAO,KAAK,EAAC,gBAAgB,EAAc,MAAM,SAAS,CAAC;AAE3D,wBAAgB,uBAAuB,CACrC,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,EAC7D,MAAM,EAAE,WAAW,GAAG,gBAAgB,CAAC,SAAS,CAAC,CA6DlD"}

package/build/ts/server/authenticate/flow/authenticate.flow.doc.d.ts

@@ -0,0 +1,4 @@
+import { ReferenceEntityTemplateSchema } from '@shopify/generate-docs';
+declare const data: ReferenceEntityTemplateSchema;
+export default data;
+//# sourceMappingURL=authenticate.flow.doc.d.ts.map

package/build/ts/server/authenticate/flow/authenticate.flow.doc.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.flow.doc.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/flow/authenticate.flow.doc.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,6BAA6B,EAAC,MAAM,wBAAwB,CAAC;AAErE,QAAA,MAAM,IAAI,EAAE,6BA6BX,CAAC;AAEF,eAAe,IAAI,CAAC"}

package/build/ts/server/authenticate/flow/authenticate.flow.doc.js

@@ -0,0 +1,33 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+var data = {
+    name: 'Flow',
+    description: 'Contains functions for verifying Shopify Flow extensions.' +
+        '\n\nSee the [Flow documentation](https://shopify.dev/docs/apps/flow/actions/endpoints) for more information.',
+    category: 'Authenticate',
+    type: 'object',
+    isVisualComponent: false,
+    definitions: [
+        {
+            title: 'authenticate.flow',
+            description: 'Verifies requests coming from Shopify Flow extensions.',
+            type: 'AuthenticateFlow',
+        },
+    ],
+    jsDocTypeExamples: ['FlowContext'],
+    related: [
+        {
+            name: 'Admin API context',
+            subtitle: 'Interact with the Admin API.',
+            url: '/docs/api/shopify-app-remix/apis/admin-api',
+        },
+        {
+            name: 'Flow action endpoints',
+            subtitle: 'Receive requests from Flow.',
+            url: '/docs/apps/flow/actions/endpoints',
+            type: 'shopify',
+        },
+    ],
+};
+exports.default = data;
+//# sourceMappingURL=authenticate.flow.doc.js.map

package/build/ts/server/authenticate/flow/authenticate.flow.doc.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.flow.doc.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/flow/authenticate.flow.doc.ts"],"names":[],"mappings":";;AAEA,IAAM,IAAI,GAAkC;IAC1C,IAAI,EAAE,MAAM;IACZ,WAAW,EACT,2DAA2D;QAC3D,8GAA8G;IAChH,QAAQ,EAAE,cAAc;IACxB,IAAI,EAAE,QAAQ;IACd,iBAAiB,EAAE,KAAK;IACxB,WAAW,EAAE;QACX;YACE,KAAK,EAAE,mBAAmB;YAC1B,WAAW,EAAE,wDAAwD;YACrE,IAAI,EAAE,kBAAkB;SACzB;KACF;IACD,iBAAiB,EAAE,CAAC,aAAa,CAAC;IAClC,OAAO,EAAE;QACP;YACE,IAAI,EAAE,mBAAmB;YACzB,QAAQ,EAAE,8BAA8B;YACxC,GAAG,EAAE,4CAA4C;SAClD;QACD;YACE,IAAI,EAAE,uBAAuB;YAC7B,QAAQ,EAAE,6BAA6B;YACvC,GAAG,EAAE,mCAAmC;YACxC,IAAI,EAAE,SAAS;SAChB;KACF;CACF,CAAC;AAEF,kBAAe,IAAI,CAAC"}

package/build/ts/server/authenticate/flow/authenticate.js

@@ -0,0 +1,67 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.authenticateFlowFactory = void 0;
+var tslib_1 = require("tslib");
+var admin_1 = require("../../clients/admin");
+function authenticateFlowFactory(params) {
+    var api = params.api, config = params.config, logger = params.logger;
+    return function authenticate(request) {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            var rawBody, result, payload, sessionId, session;
+            return tslib_1.__generator(this, function (_a) {
+                switch (_a.label) {
+                    case 0:
+                        logger.info('Authenticating flow request');
+                        if (request.method !== 'POST') {
+                            logger.debug('Received a non-POST request for flow. Only POST requests are allowed.', { url: request.url, method: request.method });
+                            throw new Response(undefined, {
+                                status: 405,
+                                statusText: 'Method not allowed',
+                            });
+                        }
+                        return [4 /*yield*/, request.text()];
+                    case 1:
+                        rawBody = _a.sent();
+                        return [4 /*yield*/, api.flow.validate({
+                                rawBody: rawBody,
+                                rawRequest: request,
+                            })];
+                    case 2:
+                        result = _a.sent();
+                        if (!result.valid) {
+                            logger.error('Received an invalid flow request', { reason: result.reason });
+                            throw new Response(undefined, {
+                                status: 400,
+                                statusText: 'Bad Request',
+                            });
+                        }
+                        payload = JSON.parse(rawBody);
+                        logger.debug('Flow request is valid, looking for an offline session', {
+                            shop: payload.shopify_domain,
+                        });
+                        sessionId = api.session.getOfflineId(payload.shopify_domain);
+                        return [4 /*yield*/, config.sessionStorage.loadSession(sessionId)];
+                    case 3:
+                        session = _a.sent();
+                        if (!session) {
+                            logger.info('Flow request could not find session', {
+                                shop: payload.shopify_domain,
+                            });
+                            throw new Response(undefined, {
+                                status: 400,
+                                statusText: 'Bad Request',
+                            });
+                        }
+                        logger.debug('Found a session for the flow request', { shop: session.shop });
+                        return [2 /*return*/, {
+                                session: session,
+                                payload: payload,
+                                admin: (0, admin_1.adminClientFactory)({ params: params, session: session }),
+                            }];
+                }
+            });
+        });
+    };
+}
+exports.authenticateFlowFactory = authenticateFlowFactory;
+//# sourceMappingURL=authenticate.js.map

package/build/ts/server/authenticate/flow/authenticate.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"authenticate.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/flow/authenticate.ts"],"names":[],"mappings":";;;;AAEA,6CAAuD;AAKvD,SAAgB,uBAAuB,CAErC,MAAmB;IACZ,IAAA,GAAG,GAAoB,MAAM,IAA1B,EAAE,MAAM,GAAY,MAAM,OAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAErC,OAAO,SAAe,YAAY,CAChC,OAAgB;;;;;;wBAEhB,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;wBAE3C,IAAI,OAAO,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;4BAC9B,MAAM,CAAC,KAAK,CACV,uEAAuE,EACvE,EAAC,GAAG,EAAE,OAAO,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAC,CAC3C,CAAC;4BACF,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;gCAC5B,MAAM,EAAE,GAAG;gCACX,UAAU,EAAE,oBAAoB;6BACjC,CAAC,CAAC;wBACL,CAAC;wBAEe,qBAAM,OAAO,CAAC,IAAI,EAAE,EAAA;;wBAA9B,OAAO,GAAG,SAAoB;wBACrB,qBAAM,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC;gCACrC,OAAO,SAAA;gCACP,UAAU,EAAE,OAAO;6BACpB,CAAC,EAAA;;wBAHI,MAAM,GAAG,SAGb;wBAEF,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;4BAClB,MAAM,CAAC,KAAK,CAAC,kCAAkC,EAAE,EAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAC,CAAC,CAAC;4BAE1E,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;gCAC5B,MAAM,EAAE,GAAG;gCACX,UAAU,EAAE,aAAa;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAEK,OAAO,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;wBAEpC,MAAM,CAAC,KAAK,CAAC,uDAAuD,EAAE;4BACpE,IAAI,EAAE,OAAO,CAAC,cAAc;yBAC7B,CAAC,CAAC;wBAEG,SAAS,GAAG,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;wBACnD,qBAAM,MAAM,CAAC,cAAc,CAAC,WAAW,CAAC,SAAS,CAAC,EAAA;;wBAA5D,OAAO,GAAG,SAAkD;wBAElE,IAAI,CAAC,OAAO,EAAE,CAAC;4BACb,MAAM,CAAC,IAAI,CAAC,qCAAqC,EAAE;gCACjD,IAAI,EAAE,OAAO,CAAC,cAAc;6BAC7B,CAAC,CAAC;4BACH,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;gCAC5B,MAAM,EAAE,GAAG;gCACX,UAAU,EAAE,aAAa;6BAC1B,CAAC,CAAC;wBACL,CAAC;wBAED,MAAM,CAAC,KAAK,CAAC,sCAAsC,EAAE,EAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAC,CAAC,CAAC;wBAE3E,sBAAO;gCACL,OAAO,SAAA;gCACP,OAAO,SAAA;gCACP,KAAK,EAAE,IAAA,0BAAkB,EAAY,EAAC,MAAM,QAAA,EAAE,OAAO,SAAA,EAAC,CAAC;6BACxD,EAAC;;;;KACH,CAAC;AACJ,CAAC;AA/DD,0DA+DC"}

package/build/ts/server/authenticate/flow/types.d.ts

@@ -0,0 +1,82 @@
+import { Session, ShopifyRestResources } from '@shopify/shopify-api';
+import type { AdminApiContext } from '../../clients';
+export interface FlowContext<Resources extends ShopifyRestResources = ShopifyRestResources> {
+    /**
+     * A session with an offline token for the shop.
+     *
+     * Returned only if there is a session for the shop.
+     *
+     * @example
+     * <caption>Shopify session for the Flow request.</caption>
+     * <description>Use the session associated with this request to use REST resources.</description>
+     * ```ts
+     * // /app/routes/flow.tsx
+     * import { ActionFunction } from "@remix-run/node";
+     * import { authenticate } from "../shopify.server";
+     *
+     * export const action: ActionFunction = async ({ request }) => {
+     *   const { session, admin } = await authenticate.flow(request);
+     *
+     *   const products = await admin?.rest.resources.Product.all({ session });
+     *   // Use products
+     *
+     *   return new Response();
+     * };
+     * ```
+     */
+    session: Session;
+    /**
+     * The payload from the Flow request.
+     *
+     * @example
+     * <caption>Flow payload.</caption>
+     * <description>Get the request's POST payload.</description>
+     * ```ts
+     * // /app/routes/flow.tsx
+     * import { ActionFunction } from "@remix-run/node";
+     * import { authenticate } from "../shopify.server";
+     *
+     * export const action: ActionFunction = async ({ request }) => {
+     *   const { payload } = await authenticate.flow(request);
+     *   return new Response();
+     * };
+     * ```
+     */
+    payload: any;
+    /**
+     * An admin context for the Flow request.
+     *
+     * Returned only if there is a session for the shop.
+     *
+     * @example
+     * <caption>Flow admin context.</caption>
+     * <description>Use the `admin` object in the context to interact with the Admin API.</description>
+     * ```ts
+     * // /app/routes/flow.tsx
+     * import { ActionFunctionArgs } from "@remix-run/node";
+     * import { authenticate } from "../shopify.server";
+     *
+     * export async function action({ request }: ActionFunctionArgs) {
+     *   const { admin } = await authenticate.flow(request);
+     *
+     *   const response = await admin?.graphql(
+     *     `#graphql
+     *     mutation populateProduct($input: ProductInput!) {
+     *       productCreate(input: $input) {
+     *         product {
+     *           id
+     *         }
+     *       }
+     *     }`,
+     *     { variables: { input: { title: "Product Name" } } }
+     *   );
+     *
+     *   const productData = await response.json();
+     *   return json({ data: productData.data });
+     * }
+     * ```
+     */
+    admin: AdminApiContext<Resources>;
+}
+export type AuthenticateFlow<Resources extends ShopifyRestResources = ShopifyRestResources> = (request: Request) => Promise<FlowContext<Resources>>;
+//# sourceMappingURL=types.d.ts.map

package/build/ts/server/authenticate/flow/types.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/flow/types.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,OAAO,EAAE,oBAAoB,EAAC,MAAM,sBAAsB,CAAC;AAEnE,OAAO,KAAK,EAAC,eAAe,EAAC,MAAM,eAAe,CAAC;AAEnD,MAAM,WAAW,WAAW,CAC1B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB;IAE7D;;;;;;;;;;;;;;;;;;;;;;OAsBG;IACH,OAAO,EAAE,OAAO,CAAC;IAEjB;;;;;;;;;;;;;;;;OAgBG;IACH,OAAO,EAAE,GAAG,CAAC;IAEb;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;OAgCG;IACH,KAAK,EAAE,eAAe,CAAC,SAAS,CAAC,CAAC;CACnC;AAED,MAAM,MAAM,gBAAgB,CAC1B,SAAS,SAAS,oBAAoB,GAAG,oBAAoB,IAC3D,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC,CAAC"}

package/build/ts/server/authenticate/flow/types.js

@@ -0,0 +1,3 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+//# sourceMappingURL=types.js.map

package/build/ts/server/authenticate/flow/types.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"types.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/flow/types.ts"],"names":[],"mappings":""}

package/build/ts/server/authenticate/helpers/add-response-headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"add-response-headers.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/add-response-headers.ts"],"names":[],"mappings":";;;AAOA,SAAgB,iCAAiC,CAC/C,MAAmB;IAEZ,IAAA,GAAG,GAAY,MAAM,IAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAE7B,OAAO,UAAU,OAAgB,EAAE,OAAgB;QAC1C,IAAA,YAAY,GAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAxB,CAAyB;QAC5C,IAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QAE/D,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC;AAXD,8EAWC;AAED,SAAgB,0BAA0B,CACxC,OAAgB,EAChB,aAAsB,EACtB,IAA+B;IAE/B,IAAI,IAAI,EAAE;QACR,OAAO,CAAC,GAAG,CACT,MAAM,EACN,mFAAmF,CACpF,CAAC;KACH;IAED,IAAI,aAAa,EAAE;QACjB,IAAI,IAAI,EAAE;YACR,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,kCAA2B,IAAI,mDAAgD,CAChF,CAAC;SACH;KACF;SAAM;QACL,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;KACnE;AACH,CAAC;AAtBD,gEAsBC"}
+{"version":3,"file":"add-response-headers.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/add-response-headers.ts"],"names":[],"mappings":";;;AAOA,SAAgB,iCAAiC,CAC/C,MAAmB;IAEZ,IAAA,GAAG,GAAY,MAAM,IAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAE7B,OAAO,UAAU,OAAgB,EAAE,OAAgB;QAC1C,IAAA,YAAY,GAAI,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAxB,CAAyB;QAC5C,IAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QAE/D,0BAA0B,CAAC,OAAO,EAAE,MAAM,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC;AACJ,CAAC;AAXD,8EAWC;AAED,SAAgB,0BAA0B,CACxC,OAAgB,EAChB,aAAsB,EACtB,IAA+B;IAE/B,IAAI,IAAI,EAAE,CAAC;QACT,OAAO,CAAC,GAAG,CACT,MAAM,EACN,mFAAmF,CACpF,CAAC;IACJ,CAAC;IAED,IAAI,aAAa,EAAE,CAAC;QAClB,IAAI,IAAI,EAAE,CAAC;YACT,OAAO,CAAC,GAAG,CACT,yBAAyB,EACzB,kCAA2B,IAAI,mDAAgD,CAChF,CAAC;QACJ,CAAC;IACH,CAAC;SAAM,CAAC;QACN,OAAO,CAAC,GAAG,CAAC,yBAAyB,EAAE,yBAAyB,CAAC,CAAC;IACpE,CAAC;AACH,CAAC;AAtBD,gEAsBC"}

package/build/ts/server/authenticate/helpers/ensure-cors-headers.js.map

@@ -1 +1 @@
-{"version":3,"file":"ensure-cors-headers.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/ensure-cors-headers.ts"],"names":[],"mappings":";;;;AACA,kCAA2C;AAM3C,SAAgB,wBAAwB,CACtC,MAAmB,EACnB,OAAgB,EAChB,WAA0B;IAA1B,4BAAA,EAAA,gBAA0B;IAEnB,IAAA,MAAM,GAAY,MAAM,OAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAEhC,OAAO,SAAS,iBAAiB,CAAC,QAAQ;QACxC,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE;YACtC,MAAM,CAAC,KAAK,CACV,4DAA4D,CAC7D,CAAC;YAEF,IAAM,cAAc,GAAG,IAAI,GAAG;gBAC5B,eAAe;gBACf,cAAc;8BACX,WAAW,UACd,CAAC;YAEH,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACzD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,yCAAI,cAAc,UAAE,IAAI,CAAC,IAAI,CAAC,CAC/B,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,yBAAiB,CAAC,CAAC;SAC1E;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AA9BD,4DA8BC"}
+{"version":3,"file":"ensure-cors-headers.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/ensure-cors-headers.ts"],"names":[],"mappings":";;;;AACA,kCAA2C;AAM3C,SAAgB,wBAAwB,CACtC,MAAmB,EACnB,OAAgB,EAChB,WAA0B;IAA1B,4BAAA,EAAA,gBAA0B;IAEnB,IAAA,MAAM,GAAY,MAAM,OAAlB,EAAE,MAAM,GAAI,MAAM,OAAV,CAAW;IAEhC,OAAO,SAAS,iBAAiB,CAAC,QAAQ;QACxC,IAAM,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;QAC7C,IAAI,MAAM,IAAI,MAAM,KAAK,MAAM,CAAC,MAAM,EAAE,CAAC;YACvC,MAAM,CAAC,KAAK,CACV,4DAA4D,CAC7D,CAAC;YAEF,IAAM,cAAc,GAAG,IAAI,GAAG;gBAC5B,eAAe;gBACf,cAAc;8BACX,WAAW,UACd,CAAC;YAEH,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,6BAA6B,EAAE,GAAG,CAAC,CAAC;YACzD,QAAQ,CAAC,OAAO,CAAC,GAAG,CAClB,8BAA8B,EAC9B,yCAAI,cAAc,UAAE,IAAI,CAAC,IAAI,CAAC,CAC/B,CAAC;YACF,QAAQ,CAAC,OAAO,CAAC,GAAG,CAAC,+BAA+B,EAAE,yBAAiB,CAAC,CAAC;QAC3E,CAAC;QAED,OAAO,QAAQ,CAAC;IAClB,CAAC,CAAC;AACJ,CAAC;AA9BD,4DA8BC"}

package/build/ts/server/authenticate/helpers/idempotent-promise-handler.d.ts

@@ -0,0 +1,12 @@
+export interface IdempotentHandlePromiseParams {
+    promiseFunction: () => Promise<any>;
+    identifier: string;
+}
+export declare class IdempotentPromiseHandler {
+    protected identifiers: Map<string, number>;
+    constructor();
+    handlePromise({ promiseFunction, identifier, }: IdempotentHandlePromiseParams): Promise<any>;
+    private isPromiseRunnable;
+    private clearStaleIdentifiers;
+}
+//# sourceMappingURL=idempotent-promise-handler.d.ts.map

package/build/ts/server/authenticate/helpers/idempotent-promise-handler.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotent-promise-handler.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/idempotent-promise-handler.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,6BAA6B;IAC5C,eAAe,EAAE,MAAM,OAAO,CAAC,GAAG,CAAC,CAAC;IACpC,UAAU,EAAE,MAAM,CAAC;CACpB;AAID,qBAAa,wBAAwB;IACnC,SAAS,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;;IAMrC,aAAa,CAAC,EAClB,eAAe,EACf,UAAU,GACX,EAAE,6BAA6B,GAAG,OAAO,CAAC,GAAG,CAAC;IAY/C,OAAO,CAAC,iBAAiB;YAQX,qBAAqB;CAOpC"}

package/build/ts/server/authenticate/helpers/idempotent-promise-handler.js

@@ -0,0 +1,53 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.IdempotentPromiseHandler = void 0;
+var tslib_1 = require("tslib");
+var IDENTIFIER_TTL_MS = 60000;
+var IdempotentPromiseHandler = /** @class */ (function () {
+    function IdempotentPromiseHandler() {
+        this.identifiers = new Map();
+    }
+    IdempotentPromiseHandler.prototype.handlePromise = function (_a) {
+        var promiseFunction = _a.promiseFunction, identifier = _a.identifier;
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            return tslib_1.__generator(this, function (_b) {
+                switch (_b.label) {
+                    case 0:
+                        _b.trys.push([0, , 3, 4]);
+                        if (!this.isPromiseRunnable(identifier)) return [3 /*break*/, 2];
+                        return [4 /*yield*/, promiseFunction()];
+                    case 1:
+                        _b.sent();
+                        _b.label = 2;
+                    case 2: return [3 /*break*/, 4];
+                    case 3:
+                        this.clearStaleIdentifiers();
+                        return [7 /*endfinally*/];
+                    case 4: return [2 /*return*/, Promise.resolve()];
+                }
+            });
+        });
+    };
+    IdempotentPromiseHandler.prototype.isPromiseRunnable = function (identifier) {
+        if (!this.identifiers.has(identifier)) {
+            this.identifiers.set(identifier, Date.now());
+            return true;
+        }
+        return false;
+    };
+    IdempotentPromiseHandler.prototype.clearStaleIdentifiers = function () {
+        return tslib_1.__awaiter(this, void 0, void 0, function () {
+            return tslib_1.__generator(this, function (_a) {
+                this.identifiers.forEach(function (date, identifier, map) {
+                    if (Date.now() - date > IDENTIFIER_TTL_MS) {
+                        map.delete(identifier);
+                    }
+                });
+                return [2 /*return*/];
+            });
+        });
+    };
+    return IdempotentPromiseHandler;
+}());
+exports.IdempotentPromiseHandler = IdempotentPromiseHandler;
+//# sourceMappingURL=idempotent-promise-handler.js.map

package/build/ts/server/authenticate/helpers/idempotent-promise-handler.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"idempotent-promise-handler.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/idempotent-promise-handler.ts"],"names":[],"mappings":";;;;AAKA,IAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC;IAGE;QACE,IAAI,CAAC,WAAW,GAAG,IAAI,GAAG,EAAkB,CAAC;IAC/C,CAAC;IAEK,gDAAa,GAAnB,UAAoB,EAGY;YAF9B,eAAe,qBAAA,EACf,UAAU,gBAAA;;;;;;6BAGJ,IAAI,CAAC,iBAAiB,CAAC,UAAU,CAAC,EAAlC,wBAAkC;wBACpC,qBAAM,eAAe,EAAE,EAAA;;wBAAvB,SAAuB,CAAC;;;;wBAG1B,IAAI,CAAC,qBAAqB,EAAE,CAAC;;4BAG/B,sBAAO,OAAO,CAAC,OAAO,EAAE,EAAC;;;;KAC1B;IAEO,oDAAiB,GAAzB,UAA0B,UAAkB;QAC1C,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,CAAC;YACtC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;YAC7C,OAAO,IAAI,CAAC;QACd,CAAC;QACD,OAAO,KAAK,CAAC;IACf,CAAC;IAEa,wDAAqB,GAAnC;;;gBACE,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,UAAC,IAAI,EAAE,UAAU,EAAE,GAAG;oBAC7C,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,IAAI,GAAG,iBAAiB,EAAE,CAAC;wBAC1C,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;oBACzB,CAAC;gBACH,CAAC,CAAC,CAAC;;;;KACJ;IACH,+BAAC;AAAD,CAAC,AArCD,IAqCC;AArCY,4DAAwB"}

package/build/ts/server/authenticate/helpers/index.d.ts

@@ -5,4 +5,5 @@ export * from './validate-session-token';
 export * from './get-session-token-header';
 export * from './reject-bot-request';
 export * from './respond-to-options-request';
+export * from './respond-to-invalid-session-token';
 //# sourceMappingURL=index.d.ts.map

package/build/ts/server/authenticate/helpers/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/index.ts"],"names":[],"mappings":"AAAA,cAAc,kBAAkB,CAAC;AACjC,cAAc,wBAAwB,CAAC;AACvC,cAAc,uBAAuB,CAAC;AACtC,cAAc,0BAA0B,CAAC;AACzC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,sBAAsB,CAAC;AACrC,cAAc,8BAA8B,CAAC;AAC7C,cAAc,oCAAoC,CAAC"}

package/build/ts/server/authenticate/helpers/index.js

@@ -8,4 +8,5 @@ tslib_1.__exportStar(require("./validate-session-token"), exports);
 tslib_1.__exportStar(require("./get-session-token-header"), exports);
 tslib_1.__exportStar(require("./reject-bot-request"), exports);
 tslib_1.__exportStar(require("./respond-to-options-request"), exports);
+tslib_1.__exportStar(require("./respond-to-invalid-session-token"), exports);
 //# sourceMappingURL=index.js.map

package/build/ts/server/authenticate/helpers/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,iEAAuC;AACvC,gEAAsC;AACtC,mEAAyC;AACzC,qEAA2C;AAC3C,+DAAqC;AACrC,uEAA6C"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/index.ts"],"names":[],"mappings":";;;AAAA,2DAAiC;AACjC,iEAAuC;AACvC,gEAAsC;AACtC,mEAAyC;AACzC,qEAA2C;AAC3C,+DAAqC;AACrC,uEAA6C;AAC7C,6EAAmD"}

package/build/ts/server/authenticate/helpers/reject-bot-request.js.map

@@ -1 +1 @@
-{"version":3,"file":"reject-bot-request.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/reject-bot-request.ts"],"names":[],"mappings":";;;;AAAA,wDAA0B;AAI1B,SAAgB,mBAAmB,CACjC,EAAqB,EACrB,OAAgB;QADf,MAAM,YAAA;IAGP,IAAI,IAAA,eAAK,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE;QAC5C,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAC,CAAC,CAAC;KAClE;AACH,CAAC;AARD,kDAQC"}
+{"version":3,"file":"reject-bot-request.js","sourceRoot":"","sources":["../../../../../src/server/authenticate/helpers/reject-bot-request.ts"],"names":[],"mappings":";;;;AAAA,wDAA0B;AAI1B,SAAgB,mBAAmB,CACjC,EAAqB,EACrB,OAAgB;QADf,MAAM,YAAA;IAGP,IAAI,IAAA,eAAK,EAAC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,EAAE,CAAC;QAC7C,MAAM,CAAC,KAAK,CAAC,sCAAsC,CAAC,CAAC;QACrD,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE,EAAC,MAAM,EAAE,GAAG,EAAE,UAAU,EAAE,MAAM,EAAC,CAAC,CAAC;IACnE,CAAC;AACH,CAAC;AARD,kDAQC"}