@shopify/shopify-app-remix 2.7.0 → 2.8.1

package/build/cjs/server/authenticate/admin/billing/require.js

@@ -1,48 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var shopifyApi = require('@shopify/shopify-api');
-require('@remix-run/server-runtime');
-var redirectToAuthPage = require('../helpers/redirect-to-auth-page.js');
-
-function requireBillingFactory(params, request, session) {
-  const {
-    api,
-    logger,
-    config
-  } = params;
-  return async function requireBilling(options) {
-    const logContext = {
-      shop: session.shop,
-      plans: options.plans,
-      isTest: options.isTest
-    };
-    logger.debug('Checking billing for the shop', logContext);
-    let data;
-    try {
-      data = await api.billing.check({
-        session,
-        plans: options.plans,
-        isTest: options.isTest,
-        returnObject: true
-      });
-    } catch (error) {
-      if (error instanceof shopifyApi.HttpResponseError && error.response.code === 401) {
-        logger.debug('API token was invalid, redirecting to OAuth', logContext);
-        await config.sessionStorage.deleteSession(session.id);
-        throw await redirectToAuthPage.redirectToAuthPage(params, request, session.shop);
-      } else {
-        throw error;
-      }
-    }
-    if (!data.hasActivePayment) {
-      logger.debug('Billing check failed', logContext);
-      throw await options.onFailure(new Error('Billing check failed'));
-    }
-    logger.debug('Billing check succeeded', logContext);
-    return data;
-  };
-}
-
-exports.requireBillingFactory = requireBillingFactory;

package/build/cjs/server/authenticate/admin/helpers/begin-auth.js

@@ -1,18 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-async function beginAuth(params, request, isOnline, shop) {
-  const {
-    api,
-    config
-  } = params;
-  throw await api.auth.begin({
-    shop,
-    callbackPath: config.auth.callbackPath,
-    isOnline,
-    rawRequest: request
-  });
-}
-
-exports.beginAuth = beginAuth;

package/build/cjs/server/authenticate/admin/helpers/create-admin-api-context.js

@@ -1,15 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var factory = require('../../../clients/admin/factory.js');
-
-function createAdminApiContext(session, params, handleClientError) {
-  return factory.adminClientFactory({
-    session,
-    params,
-    handleClientError
-  });
-}
-
-exports.createAdminApiContext = createAdminApiContext;

package/build/cjs/server/authenticate/admin/helpers/ensure-app-is-embedded-if-required.js

@@ -1,27 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var redirectToShopifyOrAppRoot = require('./redirect-to-shopify-or-app-root.js');
-
-const ensureAppIsEmbeddedIfRequired = async (params, request) => {
-  const {
-    api,
-    logger,
-    config
-  } = params;
-  const url = new URL(request.url);
-  const shop = url.searchParams.get('shop');
-  if (api.config.isEmbeddedApp && url.searchParams.get('embedded') !== '1') {
-    logger.debug('App is not embedded, redirecting to Shopify', {
-      shop
-    });
-    await redirectToShopifyOrAppRoot.redirectToShopifyOrAppRoot(request, {
-      api,
-      logger,
-      config
-    });
-  }
-};
-
-exports.ensureAppIsEmbeddedIfRequired = ensureAppIsEmbeddedIfRequired;

package/build/cjs/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.js

@@ -1,25 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var redirectToBouncePage = require('./redirect-to-bounce-page.js');
-
-const SESSION_TOKEN_PARAM = 'id_token';
-const ensureSessionTokenSearchParamIfRequired = async (params, request) => {
-  const {
-    api,
-    logger
-  } = params;
-  const url = new URL(request.url);
-  const shop = url.searchParams.get('shop');
-  const searchParamSessionToken = url.searchParams.get(SESSION_TOKEN_PARAM);
-  const isEmbedded = url.searchParams.get('embedded') === '1';
-  if (api.config.isEmbeddedApp && isEmbedded && !searchParamSessionToken) {
-    logger.debug('Missing session token in search params, going to bounce page', {
-      shop
-    });
-    redirectToBouncePage.redirectToBouncePage(params, url);
-  }
-};
-
-exports.ensureSessionTokenSearchParamIfRequired = ensureSessionTokenSearchParamIfRequired;

package/build/cjs/server/authenticate/admin/helpers/handle-client-error.js

@@ -1,43 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var shopifyApi = require('@shopify/shopify-api');
-
-function handleClientErrorFactory({
-  request,
-  onError
-}) {
-  return async function handleClientError({
-    error,
-    params,
-    session
-  }) {
-    if (error instanceof shopifyApi.HttpResponseError !== true) {
-      params.logger.debug(`Got a response error from the API: ${error.message}`);
-      throw error;
-    }
-    params.logger.debug(`Got an HTTP response error from the API: ${error.message}`, {
-      code: error.response.code,
-      statusText: error.response.statusText,
-      body: JSON.stringify(error.response.body)
-    });
-    if (onError) {
-      await onError({
-        request,
-        session,
-        error
-      });
-    }
-
-    // forward a minimal copy of the upstream HTTP response instead of an Error:
-    throw new Response(JSON.stringify(error.response.body), {
-      status: error.response.code,
-      headers: {
-        'Content-Type': error.response.headers['Content-Type']
-      }
-    });
-  };
-}
-
-exports.handleClientErrorFactory = handleClientErrorFactory;

package/build/cjs/server/authenticate/admin/helpers/redirect-to-auth-page.js

@@ -1,27 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var beginAuth = require('./begin-auth.js');
-var redirectWithExitiframe = require('./redirect-with-exitiframe.js');
-var redirectWithAppBridgeHeaders = require('./redirect-with-app-bridge-headers.js');
-
-async function redirectToAuthPage(params, request, shop, isOnline = false) {
-  const {
-    config
-  } = params;
-  const url = new URL(request.url);
-  const isEmbeddedRequest = url.searchParams.get('embedded') === '1';
-  const isXhrRequest = request.headers.get('authorization');
-  if (isXhrRequest) {
-    const redirectUri = new URL(config.auth.path, config.appUrl);
-    redirectUri.searchParams.set('shop', shop);
-    redirectWithAppBridgeHeaders.redirectWithAppBridgeHeaders(redirectUri.toString());
-  } else if (isEmbeddedRequest) {
-    redirectWithExitiframe.redirectWithExitIframe(params, request, shop);
-  } else {
-    throw await beginAuth.beginAuth(params, request, isOnline, shop);
-  }
-}
-
-exports.redirectToAuthPage = redirectToAuthPage;

package/build/cjs/server/authenticate/admin/helpers/redirect-to-bounce-page.js

@@ -1,24 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var serverRuntime = require('@remix-run/server-runtime');
-
-const redirectToBouncePage = (params, url) => {
-  const {
-    config
-  } = params;
-
-  // Make sure we always point to the configured app URL so it also works behind reverse proxies (that alter the Host
-  // header).
-  const searchParams = url.searchParams;
-  searchParams.delete('id_token');
-  searchParams.set('shopify-reload', `${config.appUrl}${url.pathname}?${searchParams.toString()}`);
-
-  // eslint-disable-next-line no-warning-comments
-  // TODO Make sure this works on chrome without a tunnel (weird HTTPS redirect issue)
-  // https://github.com/orgs/Shopify/projects/6899/views/1?pane=issue&itemId=28376650
-  throw serverRuntime.redirect(`${config.auth.patchSessionTokenPath}?${searchParams.toString()}`);
-};
-
-exports.redirectToBouncePage = redirectToBouncePage;

package/build/cjs/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.js

@@ -1,22 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var serverRuntime = require('@remix-run/server-runtime');
-
-async function redirectToShopifyOrAppRoot(request, params, responseHeaders) {
-  const {
-    api
-  } = params;
-  const url = new URL(request.url);
-  const host = api.utils.sanitizeHost(url.searchParams.get('host'));
-  const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
-  const redirectUrl = api.config.isEmbeddedApp ? await api.auth.getEmbeddedAppUrl({
-    rawRequest: request
-  }) : `/?shop=${shop}&host=${encodeURIComponent(host)}`;
-  throw serverRuntime.redirect(redirectUrl, {
-    headers: responseHeaders
-  });
-}
-
-exports.redirectToShopifyOrAppRoot = redirectToShopifyOrAppRoot;

package/build/cjs/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.js

@@ -1,21 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var _const = require('../../const.js');
-
-function redirectWithAppBridgeHeaders(redirectUri) {
-  throw new Response(undefined, {
-    status: 401,
-    statusText: 'Unauthorized',
-    headers: getAppBridgeHeaders(redirectUri)
-  });
-}
-function getAppBridgeHeaders(url) {
-  return new Headers({
-    [_const.REAUTH_URL_HEADER]: url
-  });
-}
-
-exports.getAppBridgeHeaders = getAppBridgeHeaders;
-exports.redirectWithAppBridgeHeaders = redirectWithAppBridgeHeaders;

package/build/cjs/server/authenticate/admin/helpers/redirect-with-exitiframe.js

@@ -1,25 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var serverRuntime = require('@remix-run/server-runtime');
-
-function redirectWithExitIframe(params, request, shop) {
-  const {
-    api,
-    config
-  } = params;
-  const url = new URL(request.url);
-  const queryParams = url.searchParams;
-  const host = api.utils.sanitizeHost(queryParams.get('host'));
-  queryParams.set('shop', shop);
-  let destination = `${config.auth.path}?shop=${shop}`;
-  if (host) {
-    queryParams.set('host', host);
-    destination = `${destination}&host=${host}`;
-  }
-  queryParams.set('exitIframe', destination);
-  throw serverRuntime.redirect(`${config.auth.exitIframePath}?${queryParams.toString()}`);
-}
-
-exports.redirectWithExitIframe = redirectWithExitIframe;

package/build/cjs/server/authenticate/admin/helpers/redirect.js

@@ -1,63 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var serverRuntime = require('@remix-run/server-runtime');
-var getSessionTokenHeader = require('../../helpers/get-session-token-header.js');
-var renderAppBridge = require('./render-app-bridge.js');
-var redirectWithAppBridgeHeaders = require('./redirect-with-app-bridge-headers.js');
-
-function redirectFactory(params, request) {
-  const {
-    config
-  } = params;
-  return function redirect(url, init) {
-    const {
-      searchParams
-    } = new URL(request.url);
-    const parsedUrl = new URL(url, config.appUrl);
-    const isSameOrigin = parsedUrl.origin === config.appUrl;
-    if (isSameOrigin || url.startsWith('/')) {
-      searchParams.forEach((value, key) => {
-        if (!parsedUrl.searchParams.has(key)) {
-          parsedUrl.searchParams.set(key, value);
-        }
-      });
-    }
-    const target = typeof init !== 'number' && (init === null || init === void 0 ? void 0 : init.target) || '_self';
-    if (target === '_self') {
-      if (isBounceRequest(request)) {
-        throw renderAppBridge.renderAppBridge(params, request, {
-          url: parsedUrl.toString(),
-          target
-        });
-      } else {
-        return serverRuntime.redirect(parsedUrl.toString(), init);
-      }
-    } else if (isDataRequest(request)) {
-      throw redirectWithAppBridgeHeaders.redirectWithAppBridgeHeaders(parsedUrl.toString());
-    } else if (isEmbeddedRequest(request)) {
-      throw renderAppBridge.renderAppBridge(params, request, {
-        url: parsedUrl.toString(),
-        target
-      });
-    }
-    return serverRuntime.redirect(url, init);
-  };
-}
-function isBounceRequest(request) {
-  return Boolean(getSessionTokenHeader.getSessionTokenHeader(request)) && request.headers.has('X-Shopify-Bounce');
-}
-function isDataRequest(request) {
-  const isGet = request.method === 'GET';
-  const sessionTokenHeader = Boolean(getSessionTokenHeader.getSessionTokenHeader(request));
-  return sessionTokenHeader && !isBounceRequest(request) && (!isEmbeddedRequest(request) || !isGet);
-}
-function isEmbeddedRequest(request) {
-  const {
-    searchParams
-  } = new URL(request.url);
-  return searchParams.get('embedded') === '1';
-}
-
-exports.redirectFactory = redirectFactory;

package/build/cjs/server/authenticate/admin/helpers/render-app-bridge.js

@@ -1,31 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var appBridgeUrl = require('../../helpers/app-bridge-url.js');
-var addResponseHeaders = require('../../helpers/add-response-headers.js');
-var validateRedirectUrl = require('./validate-redirect-url.js');
-
-function renderAppBridge({
-  config
-}, request, redirectTo) {
-  let redirectToScript = '';
-  if (redirectTo) {
-    var _redirectTo$target;
-    const destination = validateRedirectUrl.sanitizeRedirectUrl(config.appUrl, redirectTo.url);
-    const target = (_redirectTo$target = redirectTo.target) !== null && _redirectTo$target !== void 0 ? _redirectTo$target : '_top';
-    redirectToScript = `<script>window.open(${JSON.stringify(destination.toString())}, ${JSON.stringify(target)})</script>`;
-  }
-  const responseHeaders = new Headers({
-    'content-type': 'text/html;charset=utf-8'
-  });
-  addResponseHeaders.addDocumentResponseHeaders(responseHeaders, config.isEmbeddedApp, new URL(request.url).searchParams.get('shop'));
-  throw new Response(`
-      <script data-api-key="${config.apiKey}" src="${appBridgeUrl.appBridgeUrl()}"></script>
-      ${redirectToScript}
-    `, {
-    headers: responseHeaders
-  });
-}
-
-exports.renderAppBridge = renderAppBridge;

package/build/cjs/server/authenticate/admin/helpers/trigger-after-auth-hook.js

@@ -1,21 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var createAdminApiContext = require('./create-admin-api-context.js');
-
-async function triggerAfterAuthHook(params, session, request, authStrategy) {
-  const {
-    config,
-    logger
-  } = params;
-  if (config.hooks.afterAuth) {
-    logger.info('Running afterAuth hook');
-    await config.hooks.afterAuth({
-      session,
-      admin: createAdminApiContext.createAdminApiContext(session, params, authStrategy.handleClientError(request))
-    });
-  }
-}
-
-exports.triggerAfterAuthHook = triggerAfterAuthHook;

package/build/cjs/server/authenticate/admin/helpers/validate-redirect-url.js

@@ -1,45 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var shopifyApi = require('@shopify/shopify-api');
-
-const FILE_URI_MATCH = /\/\/\//;
-const INVALID_RELATIVE_URL = /[/\\][/\\]/;
-const WHITESPACE_CHARACTER = /\s/;
-const VALID_PROTOCOLS = ['https:', 'http:'];
-function isSafe(domain, redirectUrl, requireSSL = true) {
-  if (typeof redirectUrl !== 'string') {
-    return false;
-  }
-  if (FILE_URI_MATCH.test(redirectUrl) || WHITESPACE_CHARACTER.test(redirectUrl)) {
-    return false;
-  }
-  let url;
-  try {
-    url = new URL(redirectUrl, domain);
-  } catch (error) {
-    return false;
-  }
-  if (INVALID_RELATIVE_URL.test(url.pathname)) {
-    return false;
-  }
-  if (!VALID_PROTOCOLS.includes(url.protocol)) {
-    return false;
-  }
-  if (requireSSL && url.protocol !== 'https:') {
-    return false;
-  }
-  return true;
-}
-function sanitizeRedirectUrl(domain, redirectUrl, options = {}) {
-  if (isSafe(domain, redirectUrl, options.requireSSL)) {
-    return new URL(redirectUrl, domain);
-  } else if (options.throwOnInvalid === false) {
-    return undefined;
-  } else {
-    throw new shopifyApi.ShopifyError('Invalid URL. Refusing to redirect');
-  }
-}
-
-exports.sanitizeRedirectUrl = sanitizeRedirectUrl;

package/build/cjs/server/authenticate/admin/helpers/validate-shop-and-host-params.js

@@ -1,32 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var serverRuntime = require('@remix-run/server-runtime');
-
-function validateShopAndHostParams(params, request) {
-  const {
-    api,
-    config,
-    logger
-  } = params;
-  if (config.isEmbeddedApp) {
-    const url = new URL(request.url);
-    const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
-    if (!shop) {
-      logger.debug('Missing or invalid shop, redirecting to login path', {
-        shop
-      });
-      throw serverRuntime.redirect(config.auth.loginPath);
-    }
-    const host = api.utils.sanitizeHost(url.searchParams.get('host'));
-    if (!host) {
-      logger.debug('Invalid host, redirecting to login path', {
-        host: url.searchParams.get('host')
-      });
-      throw serverRuntime.redirect(config.auth.loginPath);
-    }
-  }
-}
-
-exports.validateShopAndHostParams = validateShopAndHostParams;