@shopify/shopify-app-remix 2.7.0 → 2.8.1

package/build/cjs/server/authenticate/helpers/ensure-cors-headers.js

@@ -1,25 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var _const = require('../const.js');
-
-function ensureCORSHeadersFactory(params, request, corsHeaders = []) {
-  const {
-    logger,
-    config
-  } = params;
-  return function ensureCORSHeaders(response) {
-    const origin = request.headers.get('Origin');
-    if (origin && origin !== config.appUrl) {
-      logger.debug('Request comes from a different origin, adding CORS headers');
-      const corsHeadersSet = new Set(['Authorization', 'Content-Type', ...corsHeaders]);
-      response.headers.set('Access-Control-Allow-Origin', '*');
-      response.headers.set('Access-Control-Allow-Headers', [...corsHeadersSet].join(', '));
-      response.headers.set('Access-Control-Expose-Headers', _const.REAUTH_URL_HEADER);
-    }
-    return response;
-  };
-}
-
-exports.ensureCORSHeadersFactory = ensureCORSHeadersFactory;

package/build/cjs/server/authenticate/helpers/get-session-token-header.js

@@ -1,16 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-const SESSION_TOKEN_PARAM = 'id_token';
-function getSessionTokenHeader(request) {
-  var _request$headers$get;
-  return (_request$headers$get = request.headers.get('authorization')) === null || _request$headers$get === void 0 ? void 0 : _request$headers$get.replace('Bearer ', '');
-}
-function getSessionTokenFromUrlParam(request) {
-  const url = new URL(request.url);
-  return url.searchParams.get(SESSION_TOKEN_PARAM);
-}
-
-exports.getSessionTokenFromUrlParam = getSessionTokenFromUrlParam;
-exports.getSessionTokenHeader = getSessionTokenHeader;

package/build/cjs/server/authenticate/helpers/idempotent-promise-handler.js

@@ -1,40 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-const IDENTIFIER_TTL_MS = 60000;
-class IdempotentPromiseHandler {
-  constructor() {
-    this.identifiers = void 0;
-    this.identifiers = new Map();
-  }
-  async handlePromise({
-    promiseFunction,
-    identifier
-  }) {
-    try {
-      if (this.isPromiseRunnable(identifier)) {
-        await promiseFunction();
-      }
-    } finally {
-      this.clearStaleIdentifiers();
-    }
-    return Promise.resolve();
-  }
-  isPromiseRunnable(identifier) {
-    if (!this.identifiers.has(identifier)) {
-      this.identifiers.set(identifier, Date.now());
-      return true;
-    }
-    return false;
-  }
-  async clearStaleIdentifiers() {
-    this.identifiers.forEach((date, identifier, map) => {
-      if (Date.now() - date > IDENTIFIER_TTL_MS) {
-        map.delete(identifier);
-      }
-    });
-  }
-}
-
-exports.IdempotentPromiseHandler = IdempotentPromiseHandler;

package/build/cjs/server/authenticate/helpers/reject-bot-request.js

@@ -1,23 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var isbot = require('isbot');
-
-function _interopDefaultLegacy (e) { return e && typeof e === 'object' && 'default' in e ? e : { 'default': e }; }
-
-var isbot__default = /*#__PURE__*/_interopDefaultLegacy(isbot);
-
-function respondToBotRequest({
-  logger
-}, request) {
-  if (isbot__default["default"](request.headers.get('User-Agent'))) {
-    logger.debug('Request is from a bot, skipping auth');
-    throw new Response(undefined, {
-      status: 410,
-      statusText: 'Gone'
-    });
-  }
-}
-
-exports.respondToBotRequest = respondToBotRequest;

package/build/cjs/server/authenticate/helpers/respond-to-invalid-session-token.js

@@ -1,33 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var redirectToBouncePage = require('../admin/helpers/redirect-to-bounce-page.js');
-var _const = require('../const.js');
-
-function respondToInvalidSessionToken({
-  params,
-  request,
-  retryRequest = false
-}) {
-  const {
-    api,
-    logger,
-    config
-  } = params;
-  const isDocumentRequest = !request.headers.get('authorization');
-  if (isDocumentRequest) {
-    return redirectToBouncePage.redirectToBouncePage({
-      api,
-      logger,
-      config
-    }, new URL(request.url));
-  }
-  throw new Response(undefined, {
-    status: 401,
-    statusText: 'Unauthorized',
-    headers: retryRequest ? _const.RETRY_INVALID_SESSION_HEADER : {}
-  });
-}
-
-exports.respondToInvalidSessionToken = respondToInvalidSessionToken;

package/build/cjs/server/authenticate/helpers/respond-to-options-request.js

@@ -1,19 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var ensureCorsHeaders = require('./ensure-cors-headers.js');
-
-function respondToOptionsRequest(params, request, corsHeaders) {
-  if (request.method === 'OPTIONS') {
-    const ensureCORSHeaders = ensureCorsHeaders.ensureCORSHeadersFactory(params, request, corsHeaders);
-    throw ensureCORSHeaders(new Response(null, {
-      status: 204,
-      headers: {
-        'Access-Control-Max-Age': '7200'
-      }
-    }));
-  }
-}
-
-exports.respondToOptionsRequest = respondToOptionsRequest;

package/build/cjs/server/authenticate/helpers/validate-session-token.js

@@ -1,29 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-async function validateSessionToken({
-  api,
-  logger
-}, token, {
-  checkAudience = true
-} = {}) {
-  logger.debug('Validating session token');
-  try {
-    const payload = await api.session.decodeSessionToken(token, {
-      checkAudience
-    });
-    logger.debug('Session token is valid', {
-      payload: JSON.stringify(payload)
-    });
-    return payload;
-  } catch (error) {
-    logger.debug(`Failed to validate session token: ${error.message}`);
-    throw new Response(undefined, {
-      status: 401,
-      statusText: 'Unauthorized'
-    });
-  }
-}
-
-exports.validateSessionToken = validateSessionToken;

package/build/cjs/server/authenticate/login/login.js

@@ -1,52 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var serverRuntime = require('@remix-run/server-runtime');
-var types = require('../../types.js');
-
-function loginFactory(params) {
-  const {
-    api,
-    config,
-    logger
-  } = params;
-  return async function login(request) {
-    const url = new URL(request.url);
-    const shopParam = url.searchParams.get('shop');
-    if (request.method === 'GET' && !shopParam) {
-      return {};
-    }
-    const shop = shopParam || (await request.formData()).get('shop');
-    if (!shop) {
-      logger.debug('Missing shop parameter', {
-        shop
-      });
-      return {
-        shop: types.LoginErrorType.MissingShop
-      };
-    }
-    const shopWithoutProtocol = shop.replace(/^https?:\/\//, '').replace(/\/$/, '');
-    const shopWithDomain = (shop === null || shop === void 0 ? void 0 : shop.indexOf('.')) === -1 ? `${shopWithoutProtocol}.myshopify.com` : shopWithoutProtocol;
-    const sanitizedShop = api.utils.sanitizeShop(shopWithDomain);
-    if (!sanitizedShop) {
-      logger.debug('Invalid shop parameter', {
-        shop
-      });
-      return {
-        shop: types.LoginErrorType.InvalidShop
-      };
-    }
-    const authPath = `${config.appUrl}${config.auth.path}?shop=${sanitizedShop}`;
-    const adminPath = api.utils.legacyUrlToShopAdminUrl(sanitizedShop);
-    const installPath = `https://${adminPath}/oauth/install?client_id=${config.apiKey}`;
-    const shouldInstall = config.isEmbeddedApp && config.future.unstable_newEmbeddedAuthStrategy;
-    const redirectUrl = shouldInstall ? installPath : authPath;
-    logger.info(`Redirecting login request to ${redirectUrl}`, {
-      shop: sanitizedShop
-    });
-    throw serverRuntime.redirect(redirectUrl);
-  };
-}
-
-exports.loginFactory = loginFactory;

package/build/cjs/server/authenticate/public/appProxy/authenticate.js

@@ -1,88 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var factory = require('../../../clients/admin/factory.js');
-var factory$1 = require('../../../clients/storefront/factory.js');
-
-function authenticateAppProxyFactory(params) {
-  const {
-    api,
-    config,
-    logger
-  } = params;
-  return async function authenticate(request) {
-    logger.info('Authenticating app proxy request');
-    const {
-      searchParams
-    } = new URL(request.url);
-    const query = Object.fromEntries(searchParams.entries());
-    let isValid = false;
-    try {
-      isValid = await api.utils.validateHmac(query, {
-        signator: 'appProxy'
-      });
-    } catch (error) {
-      logger.info(error.message);
-      throw new Response(undefined, {
-        status: 400,
-        statusText: 'Bad Request'
-      });
-    }
-    if (!isValid) {
-      logger.info('App proxy request has invalid signature');
-      throw new Response(undefined, {
-        status: 400,
-        statusText: 'Bad Request'
-      });
-    }
-    const shop = searchParams.get('shop');
-    const sessionId = api.session.getOfflineId(shop);
-    const session = await config.sessionStorage.loadSession(sessionId);
-    if (!session) {
-      const context = {
-        liquid,
-        session: undefined,
-        admin: undefined,
-        storefront: undefined
-      };
-      return context;
-    }
-    const context = {
-      liquid,
-      session,
-      admin: factory.adminClientFactory({
-        params,
-        session
-      }),
-      storefront: factory$1.storefrontClientFactory({
-        params,
-        session
-      })
-    };
-    return context;
-  };
-}
-const liquid = (body, initAndOptions) => {
-  if (typeof initAndOptions !== 'object') {
-    return new Response(body, {
-      status: initAndOptions || 200,
-      headers: {
-        'Content-Type': 'application/liquid'
-      }
-    });
-  }
-  const {
-    layout,
-    ...responseInit
-  } = initAndOptions || {};
-  const responseBody = layout === false ? `{% layout none %} ${body}` : body;
-  const headers = new Headers(responseInit.headers);
-  headers.set('Content-Type', 'application/liquid');
-  return new Response(responseBody, {
-    ...responseInit,
-    headers
-  });
-};
-
-exports.authenticateAppProxyFactory = authenticateAppProxyFactory;

package/build/cjs/server/authenticate/public/checkout/authenticate.js

@@ -1,39 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var ensureCorsHeaders = require('../../helpers/ensure-cors-headers.js');
-var validateSessionToken = require('../../helpers/validate-session-token.js');
-var getSessionTokenHeader = require('../../helpers/get-session-token-header.js');
-var rejectBotRequest = require('../../helpers/reject-bot-request.js');
-var respondToOptionsRequest = require('../../helpers/respond-to-options-request.js');
-require('@remix-run/server-runtime');
-
-function authenticateCheckoutFactory(params) {
-  return async function authenticateCheckout(request, options = {}) {
-    var _options$corsHeaders;
-    const {
-      logger
-    } = params;
-    const corsHeaders = (_options$corsHeaders = options.corsHeaders) !== null && _options$corsHeaders !== void 0 ? _options$corsHeaders : [];
-    rejectBotRequest.respondToBotRequest(params, request);
-    respondToOptionsRequest.respondToOptionsRequest(params, request, corsHeaders);
-    const sessionTokenHeader = getSessionTokenHeader.getSessionTokenHeader(request);
-    logger.info('Authenticating checkout request');
-    if (!sessionTokenHeader) {
-      logger.debug('Request did not contain a session token');
-      throw new Response(undefined, {
-        status: 401,
-        statusText: 'Unauthorized'
-      });
-    }
-    return {
-      sessionToken: await validateSessionToken.validateSessionToken(params, sessionTokenHeader, {
-        checkAudience: false
-      }),
-      cors: ensureCorsHeaders.ensureCORSHeadersFactory(params, request, corsHeaders)
-    };
-  };
-}
-
-exports.authenticateCheckoutFactory = authenticateCheckoutFactory;

package/build/cjs/server/authenticate/public/factory.js

@@ -1,31 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var authenticate = require('./checkout/authenticate.js');
-var authenticate$1 = require('./appProxy/authenticate.js');
-
-function authenticatePublicFactory(params) {
-  const {
-    logger,
-    config
-  } = params;
-  const authenticateCheckout = authenticate.authenticateCheckoutFactory(params);
-  const authenticateAppProxy = authenticate$1.authenticateAppProxyFactory(params);
-  if (config.future.v3_authenticatePublic) {
-    const context = {
-      checkout: authenticateCheckout,
-      appProxy: authenticateAppProxy
-    };
-    return context;
-  }
-  const authenticatePublic = (request, options) => {
-    logger.deprecated('3.0.0', 'authenticate.public() will be deprecated in v3. Use authenticate.public.checkout() instead.');
-    return authenticateCheckout(request, options);
-  };
-  authenticatePublic.checkout = authenticateCheckout;
-  authenticatePublic.appProxy = authenticateAppProxy;
-  return authenticatePublic;
-}
-
-exports.authenticatePublicFactory = authenticatePublicFactory;

package/build/cjs/server/authenticate/webhooks/authenticate.js

@@ -1,96 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var shopifyApi = require('@shopify/shopify-api');
-var factory = require('../../clients/admin/factory.js');
-require('@remix-run/server-runtime');
-var handleClientError = require('../admin/helpers/handle-client-error.js');
-
-function authenticateWebhookFactory(params) {
-  const {
-    api,
-    config,
-    logger
-  } = params;
-  return async function authenticate(request) {
-    if (request.method !== 'POST') {
-      logger.debug('Received a non-POST request for a webhook. Only POST requests are allowed.', {
-        url: request.url,
-        method: request.method
-      });
-      throw new Response(undefined, {
-        status: 405,
-        statusText: 'Method not allowed'
-      });
-    }
-    const rawBody = await request.text();
-    const check = await api.webhooks.validate({
-      rawBody,
-      rawRequest: request
-    });
-    if (!check.valid) {
-      if (check.reason === shopifyApi.WebhookValidationErrorReason.InvalidHmac) {
-        logger.debug('Webhook HMAC validation failed', check);
-        throw new Response(undefined, {
-          status: 401,
-          statusText: 'Unauthorized'
-        });
-      } else {
-        logger.debug('Webhook validation failed', check);
-        throw new Response(undefined, {
-          status: 400,
-          statusText: 'Bad Request'
-        });
-      }
-    }
-    const sessionId = api.session.getOfflineId(check.domain);
-    const session = await config.sessionStorage.loadSession(sessionId);
-    const webhookContext = {
-      apiVersion: check.apiVersion,
-      shop: check.domain,
-      topic: check.topic,
-      webhookId: check.webhookId,
-      payload: JSON.parse(rawBody),
-      subTopic: check.subTopic || undefined,
-      session: undefined,
-      admin: undefined
-    };
-    if (!session) {
-      return webhookContext;
-    }
-    let admin;
-    if (config.future.v3_webhookAdminContext) {
-      admin = factory.adminClientFactory({
-        params,
-        session,
-        handleClientError: handleClientError.handleClientErrorFactory({
-          request
-        })
-      });
-    } else {
-      const restClient = new api.clients.Rest({
-        session,
-        apiVersion: check.apiVersion
-      });
-      const graphqlClient = new api.clients.Graphql({
-        session,
-        apiVersion: check.apiVersion
-      });
-      Object.entries(api.rest).forEach(([name, resource]) => {
-        Reflect.set(restClient, name, resource);
-      });
-      admin = {
-        rest: restClient,
-        graphql: graphqlClient
-      };
-    }
-    return {
-      ...webhookContext,
-      session,
-      admin: admin
-    };
-  };
-}
-
-exports.authenticateWebhookFactory = authenticateWebhookFactory;

package/build/cjs/server/authenticate/webhooks/register.js

@@ -1,56 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-function registerWebhooksFactory({
-  api,
-  logger
-}) {
-  return async function registerWebhooks({
-    session
-  }) {
-    return api.webhooks.register({
-      session
-    }).then(response => {
-      Object.entries(response).forEach(([topic, topicResults]) => {
-        topicResults.forEach(({
-          success,
-          ...rest
-        }) => {
-          if (success) {
-            logger.debug('Registered webhook', {
-              topic,
-              shop: session.shop,
-              operation: rest.operation
-            });
-          } else {
-            logger.error('Failed to register webhook', {
-              topic,
-              shop: session.shop,
-              result: JSON.stringify(rest.result)
-            });
-          }
-        });
-      });
-      return response;
-    }).catch(error => {
-      var _error$body, _error$body$errors;
-      const graphQLErrors = ((_error$body = error.body) === null || _error$body === void 0 ? void 0 : (_error$body$errors = _error$body.errors) === null || _error$body$errors === void 0 ? void 0 : _error$body$errors.graphQLErrors) || [];
-      const throttled = graphQLErrors.find(({
-        extensions: {
-          code
-        }
-      }) => code === 'THROTTLED');
-      if (throttled) {
-        logger.error('Failed to register webhooks', {
-          shop: session.shop,
-          error: JSON.stringify(error)
-        });
-      } else {
-        throw error;
-      }
-    });
-  };
-}
-
-exports.registerWebhooksFactory = registerWebhooksFactory;

package/build/cjs/server/boundary/error.js

@@ -1,18 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var jsxRuntime = require('react/jsx-runtime');
-
-function errorBoundary(error) {
-  if (error.constructor.name === 'ErrorResponse' || error.constructor.name === 'ErrorResponseImpl') {
-    return /*#__PURE__*/jsxRuntime.jsx("div", {
-      dangerouslySetInnerHTML: {
-        __html: error.data || 'Handling response'
-      }
-    });
-  }
-  throw error;
-}
-
-exports.errorBoundary = errorBoundary;

package/build/cjs/server/boundary/headers.js

@@ -1,18 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-function headersBoundary(headers) {
-  const {
-    parentHeaders,
-    loaderHeaders,
-    actionHeaders,
-    errorHeaders
-  } = headers;
-  if (errorHeaders && Array.from(errorHeaders.entries()).length > 0) {
-    return errorHeaders;
-  }
-  return new Headers([...(parentHeaders ? Array.from(parentHeaders.entries()) : []), ...(loaderHeaders ? Array.from(loaderHeaders.entries()) : []), ...(actionHeaders ? Array.from(actionHeaders.entries()) : [])]);
-}
-
-exports.headersBoundary = headersBoundary;

package/build/cjs/server/boundary/index.js

@@ -1,44 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var headers = require('./headers.js');
-var error = require('./error.js');
-
-/**
- * A collection of functions that handle the necessary code for error boundaries in routes using authenticate.admin.
- */
-const boundary = {
-  /**
-   * A function that handles errors or thrown responses.
-   *
-   * @example
-   * <caption>Catching errors in a route</caption>
-   * ```ts
-   * // /app/routes/admin/widgets.ts
-   * import { boundary } from "@shopify/shopify-app-remix/server";
-   *
-   * export function ErrorBoundary() {
-   *   return boundary.error(useRouteError());
-   * }
-   * ```
-   */
-  error: error.errorBoundary,
-  /**
-   * A function that sets the appropriate document repsonse headers.
-   *
-   * @example
-   * <caption>Catching errors in a route</caption>
-   * ```ts
-   * // /app/routes/admin/widgets.ts
-   * import { boundary } from "@shopify/shopify-app-remix/server";
-   *
-   * export const headers = (headersArgs) => {
-   *   return boundary.headers(headersArgs);
-   * };
-   * ```
-   */
-  headers: headers.headersBoundary
-};
-
-exports.boundary = boundary;

package/build/cjs/server/clients/admin/factory.js

@@ -1,27 +0,0 @@
-'use strict';
-
-Object.defineProperty(exports, '__esModule', { value: true });
-
-var graphql = require('./graphql.js');
-var rest = require('./rest.js');
-
-function adminClientFactory({
-  params,
-  handleClientError,
-  session
-}) {
-  return {
-    rest: rest.restClientFactory({
-      params,
-      session,
-      handleClientError
-    }),
-    graphql: graphql.graphqlClientFactory({
-      params,
-      session,
-      handleClientError
-    })
-  };
-}
-
-exports.adminClientFactory = adminClientFactory;