@shopify/shopify-app-remix 2.7.0 → 2.8.1

package/dist/cjs/server/authenticate/admin/billing/request.js

@@ -0,0 +1,75 @@
+'use strict';
+
+var shopifyApi = require('@shopify/shopify-api');
+var serverRuntime = require('@remix-run/server-runtime');
+var redirectToAuthPage = require('../helpers/redirect-to-auth-page.js');
+var redirectWithAppBridgeHeaders = require('../helpers/redirect-with-app-bridge-headers.js');
+
+function requestBillingFactory(params, request, session) {
+    return async function requestBilling({ plan, isTest, returnUrl, ...overrides }) {
+        const { api, logger, config } = params;
+        logger.info('Requesting billing', {
+            shop: session.shop,
+            plan,
+            isTest,
+            returnUrl,
+        });
+        let result;
+        try {
+            result = await api.billing.request({
+                plan: plan,
+                session,
+                isTest,
+                returnUrl,
+                returnObject: true,
+                ...overrides,
+            });
+        }
+        catch (error) {
+            if (error instanceof shopifyApi.HttpResponseError && error.response.code === 401) {
+                logger.debug('API token was invalid, redirecting to OAuth', {
+                    shop: session.shop,
+                });
+                await config.sessionStorage.deleteSession(session.id);
+                throw await redirectToAuthPage.redirectToAuthPage(params, request, session.shop);
+            }
+            else {
+                throw error;
+            }
+        }
+        throw redirectOutOfApp(params, request, result.confirmationUrl, session.shop);
+    };
+}
+function redirectOutOfApp(params, request, url, shop) {
+    const { config, logger } = params;
+    logger.debug('Redirecting out of app', { url });
+    const requestUrl = new URL(request.url);
+    const isEmbeddedRequest = requestUrl.searchParams.get('embedded') === '1';
+    const isXhrRequest = request.headers.get('authorization');
+    if (isXhrRequest) {
+        // eslint-disable-next-line no-warning-comments
+        // TODO Check this with the beta flag disabled (with the bounce page)
+        // Remix is not including the X-Shopify-API-Request-Failure-Reauthorize-Url when throwing a Response
+        // https://github.com/remix-run/remix/issues/5356
+        throw new Response(undefined, {
+            status: 401,
+            statusText: 'Unauthorized',
+            headers: redirectWithAppBridgeHeaders.getAppBridgeHeaders(url),
+        });
+    }
+    else if (isEmbeddedRequest) {
+        const params = new URLSearchParams({
+            shop,
+            host: requestUrl.searchParams.get('host'),
+            exitIframe: url,
+        });
+        throw serverRuntime.redirect(`${config.auth.exitIframePath}?${params.toString()}`);
+    }
+    else {
+        // This will only ever happen for non-embedded apps, because the authenticator will stop before reaching this point
+        throw serverRuntime.redirect(url);
+    }
+}
+
+exports.requestBillingFactory = requestBillingFactory;
+//# sourceMappingURL=request.js.map

package/dist/cjs/server/authenticate/admin/billing/request.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"request.js","sources":["../../../../../../../src/server/authenticate/admin/billing/request.ts"],"sourcesContent":[null],"names":["HttpResponseError","redirectToAuthPage","getAppBridgeHeaders","redirect"],"mappings":";;;;;;;SAagB,qBAAqB,CACnC,MAAmB,EACnB,OAAgB,EAChB,OAAgB,EAAA;AAEhB,IAAA,OAAO,eAAe,cAAc,CAAC,EACnC,IAAI,EACJ,MAAM,EACN,SAAS,EACT,GAAG,SAAS,EACkB,EAAA;QAC9B,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,QAAA,MAAM,CAAC,IAAI,CAAC,oBAAoB,EAAE;YAChC,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,IAAI;YACJ,MAAM;YACN,SAAS;AACV,SAAA,CAAC,CAAC;AAEH,QAAA,IAAI,MAAoC,CAAC;AACzC,QAAA,IAAI;AACF,YAAA,MAAM,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,OAAO,CAAC;AACjC,gBAAA,IAAI,EAAE,IAAc;gBACpB,OAAO;gBACP,MAAM;gBACN,SAAS;AACT,gBAAA,YAAY,EAAE,IAAI;AAClB,gBAAA,GAAG,SAAS;AACb,aAAA,CAAC,CAAC;SACJ;QAAC,OAAO,KAAK,EAAE;AACd,YAAA,IAAI,KAAK,YAAYA,4BAAiB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE;AACrE,gBAAA,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE;oBAC1D,IAAI,EAAE,OAAO,CAAC,IAAI;AACnB,iBAAA,CAAC,CAAC;gBACH,MAAM,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtD,MAAM,MAAMC,qCAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;aAC/D;iBAAM;AACL,gBAAA,MAAM,KAAK,CAAC;aACb;SACF;AAED,QAAA,MAAM,gBAAgB,CACpB,MAAM,EACN,OAAO,EACP,MAAM,CAAC,eAAe,EACtB,OAAO,CAAC,IAAI,CACb,CAAC;AACJ,KAAC,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAmB,EACnB,OAAgB,EAChB,GAAW,EACX,IAAY,EAAA;AAEZ,IAAA,MAAM,EAAC,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IAEhC,MAAM,CAAC,KAAK,CAAC,wBAAwB,EAAE,EAAC,GAAG,EAAC,CAAC,CAAC;IAE9C,MAAM,UAAU,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACxC,IAAA,MAAM,iBAAiB,GAAG,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;IAC1E,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,YAAY,EAAE;;;;;AAKhB,QAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,YAAA,MAAM,EAAE,GAAG;AACX,YAAA,UAAU,EAAE,cAAc;AAC1B,YAAA,OAAO,EAAEC,gDAAmB,CAAC,GAAG,CAAC;AAClC,SAAA,CAAC,CAAC;KACJ;SAAM,IAAI,iBAAiB,EAAE;AAC5B,QAAA,MAAM,MAAM,GAAG,IAAI,eAAe,CAAC;YACjC,IAAI;YACJ,IAAI,EAAE,UAAU,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE;AAC1C,YAAA,UAAU,EAAE,GAAG;AAChB,SAAA,CAAC,CAAC;AAEH,QAAA,MAAMC,sBAAQ,CAAC,CAAG,EAAA,MAAM,CAAC,IAAI,CAAC,cAAc,CAAA,CAAA,EAAI,MAAM,CAAC,QAAQ,EAAE,CAAA,CAAE,CAAC,CAAC;KACtE;SAAM;;AAEL,QAAA,MAAMA,sBAAQ,CAAC,GAAG,CAAC,CAAC;KACrB;AACH;;;;"}

package/dist/cjs/server/authenticate/admin/billing/require.js

@@ -0,0 +1,45 @@
+'use strict';
+
+var shopifyApi = require('@shopify/shopify-api');
+require('@remix-run/server-runtime');
+var redirectToAuthPage = require('../helpers/redirect-to-auth-page.js');
+
+function requireBillingFactory(params, request, session) {
+    const { api, logger, config } = params;
+    return async function requireBilling(options) {
+        const logContext = {
+            shop: session.shop,
+            plans: options.plans,
+            isTest: options.isTest,
+        };
+        logger.debug('Checking billing for the shop', logContext);
+        let data;
+        try {
+            data = await api.billing.check({
+                session,
+                plans: options.plans,
+                isTest: options.isTest,
+                returnObject: true,
+            });
+        }
+        catch (error) {
+            if (error instanceof shopifyApi.HttpResponseError && error.response.code === 401) {
+                logger.debug('API token was invalid, redirecting to OAuth', logContext);
+                await config.sessionStorage.deleteSession(session.id);
+                throw await redirectToAuthPage.redirectToAuthPage(params, request, session.shop);
+            }
+            else {
+                throw error;
+            }
+        }
+        if (!data.hasActivePayment) {
+            logger.debug('Billing check failed', logContext);
+            throw await options.onFailure(new Error('Billing check failed'));
+        }
+        logger.debug('Billing check succeeded', logContext);
+        return data;
+    };
+}
+
+exports.requireBillingFactory = requireBillingFactory;
+//# sourceMappingURL=require.js.map

package/dist/cjs/server/authenticate/admin/billing/require.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"require.js","sources":["../../../../../../../src/server/authenticate/admin/billing/require.ts"],"sourcesContent":[null],"names":["HttpResponseError","redirectToAuthPage"],"mappings":";;;;;;SAYgB,qBAAqB,CACnC,MAAmB,EACnB,OAAgB,EAChB,OAAgB,EAAA;IAEhB,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,IAAA,OAAO,eAAe,cAAc,CAAC,OAAsC,EAAA;AACzE,QAAA,MAAM,UAAU,GAAG;YACjB,IAAI,EAAE,OAAO,CAAC,IAAI;YAClB,KAAK,EAAE,OAAO,CAAC,KAAK;YACpB,MAAM,EAAE,OAAO,CAAC,MAAM;SACvB,CAAC;AAEF,QAAA,MAAM,CAAC,KAAK,CAAC,+BAA+B,EAAE,UAAU,CAAC,CAAC;AAE1D,QAAA,IAAI,IAAgC,CAAC;AACrC,QAAA,IAAI;AACF,YAAA,IAAI,GAAG,MAAM,GAAG,CAAC,OAAO,CAAC,KAAK,CAAC;gBAC7B,OAAO;gBACP,KAAK,EAAE,OAAO,CAAC,KAAiB;gBAChC,MAAM,EAAE,OAAO,CAAC,MAAM;AACtB,gBAAA,YAAY,EAAE,IAAI;AACnB,aAAA,CAAC,CAAC;SACJ;QAAC,OAAO,KAAK,EAAE;AACd,YAAA,IAAI,KAAK,YAAYA,4BAAiB,IAAI,KAAK,CAAC,QAAQ,CAAC,IAAI,KAAK,GAAG,EAAE;AACrE,gBAAA,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,UAAU,CAAC,CAAC;gBACxE,MAAM,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;gBACtD,MAAM,MAAMC,qCAAkB,CAAC,MAAM,EAAE,OAAO,EAAE,OAAO,CAAC,IAAI,CAAC,CAAC;aAC/D;iBAAM;AACL,gBAAA,MAAM,KAAK,CAAC;aACb;SACF;AAED,QAAA,IAAI,CAAC,IAAI,CAAC,gBAAgB,EAAE;AAC1B,YAAA,MAAM,CAAC,KAAK,CAAC,sBAAsB,EAAE,UAAU,CAAC,CAAC;YACjD,MAAM,MAAM,OAAO,CAAC,SAAS,CAAC,IAAI,KAAK,CAAC,sBAAsB,CAAC,CAAC,CAAC;SAClE;AAED,QAAA,MAAM,CAAC,KAAK,CAAC,yBAAyB,EAAE,UAAU,CAAC,CAAC;AAEpD,QAAA,OAAO,IAAI,CAAC;AACd,KAAC,CAAC;AACJ;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/begin-auth.js

@@ -0,0 +1,14 @@
+'use strict';
+
+async function beginAuth(params, request, isOnline, shop) {
+    const { api, config } = params;
+    throw await api.auth.begin({
+        shop,
+        callbackPath: config.auth.callbackPath,
+        isOnline,
+        rawRequest: request,
+    });
+}
+
+exports.beginAuth = beginAuth;
+//# sourceMappingURL=begin-auth.js.map

package/dist/cjs/server/authenticate/admin/helpers/begin-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"begin-auth.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/begin-auth.ts"],"sourcesContent":[null],"names":[],"mappings":";;AAEO,eAAe,SAAS,CAC7B,MAAmB,EACnB,OAAgB,EAChB,QAAiB,EACjB,IAAY,EAAA;AAEZ,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAE7B,IAAA,MAAM,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC;QACzB,IAAI;AACJ,QAAA,YAAY,EAAE,MAAM,CAAC,IAAI,CAAC,YAAY;QACtC,QAAQ;AACR,QAAA,UAAU,EAAE,OAAO;AACpB,KAAA,CAAC,CAAC;AACL;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/create-admin-api-context.js

@@ -0,0 +1,14 @@
+'use strict';
+
+var factory = require('../../../clients/admin/factory.js');
+
+function createAdminApiContext(session, params, handleClientError) {
+    return factory.adminClientFactory({
+        session,
+        params,
+        handleClientError,
+    });
+}
+
+exports.createAdminApiContext = createAdminApiContext;
+//# sourceMappingURL=create-admin-api-context.js.map

package/dist/cjs/server/authenticate/admin/helpers/create-admin-api-context.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"create-admin-api-context.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/create-admin-api-context.ts"],"sourcesContent":[null],"names":["adminClientFactory"],"mappings":";;;;SASgB,qBAAqB,CAGnC,OAAgB,EAChB,MAAmB,EACnB,iBAAyC,EAAA;AAEzC,IAAA,OAAOA,0BAAkB,CAAY;QACnC,OAAO;QACP,MAAM;QACN,iBAAiB;AAClB,KAAA,CAAC,CAAC;AACL;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/ensure-app-is-embedded-if-required.js

@@ -0,0 +1,16 @@
+'use strict';
+
+var redirectToShopifyOrAppRoot = require('./redirect-to-shopify-or-app-root.js');
+
+const ensureAppIsEmbeddedIfRequired = async (params, request) => {
+    const { api, logger, config } = params;
+    const url = new URL(request.url);
+    const shop = url.searchParams.get('shop');
+    if (api.config.isEmbeddedApp && url.searchParams.get('embedded') !== '1') {
+        logger.debug('App is not embedded, redirecting to Shopify', { shop });
+        await redirectToShopifyOrAppRoot.redirectToShopifyOrAppRoot(request, { api, logger, config });
+    }
+};
+
+exports.ensureAppIsEmbeddedIfRequired = ensureAppIsEmbeddedIfRequired;
+//# sourceMappingURL=ensure-app-is-embedded-if-required.js.map

package/dist/cjs/server/authenticate/admin/helpers/ensure-app-is-embedded-if-required.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-app-is-embedded-if-required.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/ensure-app-is-embedded-if-required.ts"],"sourcesContent":[null],"names":["redirectToShopifyOrAppRoot"],"mappings":";;;;AAIa,MAAA,6BAA6B,GAAG,OAC3C,MAAmB,EACnB,OAAgB,KACd;IACF,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IACrC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;AAE3C,IAAA,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,EAAE;QACxE,MAAM,CAAC,KAAK,CAAC,6CAA6C,EAAE,EAAC,IAAI,EAAC,CAAC,CAAC;AACpE,QAAA,MAAMA,qDAA0B,CAAC,OAAO,EAAE,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,CAAC,CAAC;KAClE;AACH;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.js

@@ -0,0 +1,19 @@
+'use strict';
+
+var redirectToBouncePage = require('./redirect-to-bounce-page.js');
+
+const SESSION_TOKEN_PARAM = 'id_token';
+const ensureSessionTokenSearchParamIfRequired = async (params, request) => {
+    const { api, logger } = params;
+    const url = new URL(request.url);
+    const shop = url.searchParams.get('shop');
+    const searchParamSessionToken = url.searchParams.get(SESSION_TOKEN_PARAM);
+    const isEmbedded = url.searchParams.get('embedded') === '1';
+    if (api.config.isEmbeddedApp && isEmbedded && !searchParamSessionToken) {
+        logger.debug('Missing session token in search params, going to bounce page', { shop });
+        redirectToBouncePage.redirectToBouncePage(params, url);
+    }
+};
+
+exports.ensureSessionTokenSearchParamIfRequired = ensureSessionTokenSearchParamIfRequired;
+//# sourceMappingURL=ensure-session-token-search-param-if-required.js.map

package/dist/cjs/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"ensure-session-token-search-param-if-required.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/ensure-session-token-search-param-if-required.ts"],"sourcesContent":[null],"names":["redirectToBouncePage"],"mappings":";;;;AAIA,MAAM,mBAAmB,GAAG,UAAU,CAAC;AAE1B,MAAA,uCAAuC,GAAG,OACrD,MAAmB,EACnB,OAAgB,KACd;AACF,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAEjC,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC;IAC3C,MAAM,uBAAuB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,mBAAmB,CAAC,CAAC;AAC1E,IAAA,MAAM,UAAU,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;IAE5D,IAAI,GAAG,CAAC,MAAM,CAAC,aAAa,IAAI,UAAU,IAAI,CAAC,uBAAuB,EAAE;QACtE,MAAM,CAAC,KAAK,CACV,8DAA8D,EAC9D,EAAC,IAAI,EAAC,CACP,CAAC;AACF,QAAAA,yCAAoB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC;KACnC;AACH;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/handle-client-error.js

@@ -0,0 +1,30 @@
+'use strict';
+
+var shopifyApi = require('@shopify/shopify-api');
+
+function handleClientErrorFactory({ request, onError, }) {
+    return async function handleClientError({ error, params, session, }) {
+        if (error instanceof shopifyApi.HttpResponseError !== true) {
+            params.logger.debug(`Got a response error from the API: ${error.message}`);
+            throw error;
+        }
+        params.logger.debug(`Got an HTTP response error from the API: ${error.message}`, {
+            code: error.response.code,
+            statusText: error.response.statusText,
+            body: JSON.stringify(error.response.body),
+        });
+        if (onError) {
+            await onError({ request, session, error });
+        }
+        // forward a minimal copy of the upstream HTTP response instead of an Error:
+        throw new Response(JSON.stringify(error.response.body), {
+            status: error.response.code,
+            headers: {
+                'Content-Type': error.response.headers['Content-Type'],
+            },
+        });
+    };
+}
+
+exports.handleClientErrorFactory = handleClientErrorFactory;
+//# sourceMappingURL=handle-client-error.js.map

package/dist/cjs/server/authenticate/admin/helpers/handle-client-error.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"handle-client-error.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/handle-client-error.ts"],"sourcesContent":[null],"names":["HttpResponseError"],"mappings":";;;;SAKgB,wBAAwB,CAAC,EACvC,OAAO,EACP,OAAO,GACkB,EAAA;IACzB,OAAO,eAAe,iBAAiB,CAAC,EACtC,KAAK,EACL,MAAM,EACN,OAAO,GACR,EAAA;AACC,QAAA,IAAI,KAAK,YAAYA,4BAAiB,KAAK,IAAI,EAAE;YAC/C,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,CAAsC,mCAAA,EAAA,KAAK,CAAC,OAAO,CAAE,CAAA,CACtD,CAAC;AACF,YAAA,MAAM,KAAK,CAAC;SACb;QAED,MAAM,CAAC,MAAM,CAAC,KAAK,CACjB,4CAA4C,KAAK,CAAC,OAAO,CAAA,CAAE,EAC3D;AACE,YAAA,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AACzB,YAAA,UAAU,EAAE,KAAK,CAAC,QAAQ,CAAC,UAAU;YACrC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC;AAC1C,SAAA,CACF,CAAC;QAEF,IAAI,OAAO,EAAE;YACX,MAAM,OAAO,CAAC,EAAC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAC,CAAC,CAAC;SAC1C;;AAGD,QAAA,MAAM,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE;AACtD,YAAA,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,IAAI;AAC3B,YAAA,OAAO,EAAE;gBACP,cAAc,EAAE,KAAK,CAAC,QAAQ,CAAC,OAAQ,CAAC,cAAc,CAAW;AAClE,aAAA;AACF,SAAA,CAAC,CAAC;AACL,KAAC,CAAC;AACJ;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/redirect-to-auth-page.js

@@ -0,0 +1,26 @@
+'use strict';
+
+var beginAuth = require('./begin-auth.js');
+var redirectWithExitiframe = require('./redirect-with-exitiframe.js');
+var redirectWithAppBridgeHeaders = require('./redirect-with-app-bridge-headers.js');
+
+async function redirectToAuthPage(params, request, shop, isOnline = false) {
+    const { config } = params;
+    const url = new URL(request.url);
+    const isEmbeddedRequest = url.searchParams.get('embedded') === '1';
+    const isXhrRequest = request.headers.get('authorization');
+    if (isXhrRequest) {
+        const redirectUri = new URL(config.auth.path, config.appUrl);
+        redirectUri.searchParams.set('shop', shop);
+        redirectWithAppBridgeHeaders.redirectWithAppBridgeHeaders(redirectUri.toString());
+    }
+    else if (isEmbeddedRequest) {
+        redirectWithExitiframe.redirectWithExitIframe(params, request, shop);
+    }
+    else {
+        throw await beginAuth.beginAuth(params, request, isOnline, shop);
+    }
+}
+
+exports.redirectToAuthPage = redirectToAuthPage;
+//# sourceMappingURL=redirect-to-auth-page.js.map

package/dist/cjs/server/authenticate/admin/helpers/redirect-to-auth-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-to-auth-page.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-to-auth-page.ts"],"sourcesContent":[null],"names":["redirectWithAppBridgeHeaders","redirectWithExitIframe","beginAuth"],"mappings":";;;;;;AAMO,eAAe,kBAAkB,CACtC,MAAmB,EACnB,OAAgB,EAChB,IAAY,EACZ,QAAQ,GAAG,KAAK,EAAA;AAEhB,IAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;IAExB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACjC,IAAA,MAAM,iBAAiB,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;IACnE,MAAM,YAAY,GAAG,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,CAAC;IAE1D,IAAI,YAAY,EAAE;AAChB,QAAA,MAAM,WAAW,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAC7D,WAAW,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC3C,QAAAA,yDAA4B,CAAC,WAAW,CAAC,QAAQ,EAAE,CAAC,CAAC;KACtD;SAAM,IAAI,iBAAiB,EAAE;AAC5B,QAAAC,6CAAsB,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;KAC/C;SAAM;QACL,MAAM,MAAMC,mBAAS,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;KACxD;AACH;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/redirect-to-bounce-page.js

@@ -0,0 +1,19 @@
+'use strict';
+
+var serverRuntime = require('@remix-run/server-runtime');
+
+const redirectToBouncePage = (params, url) => {
+    const { config } = params;
+    // Make sure we always point to the configured app URL so it also works behind reverse proxies (that alter the Host
+    // header).
+    const searchParams = url.searchParams;
+    searchParams.delete('id_token');
+    searchParams.set('shopify-reload', `${config.appUrl}${url.pathname}?${searchParams.toString()}`);
+    // eslint-disable-next-line no-warning-comments
+    // TODO Make sure this works on chrome without a tunnel (weird HTTPS redirect issue)
+    // https://github.com/orgs/Shopify/projects/6899/views/1?pane=issue&itemId=28376650
+    throw serverRuntime.redirect(`${config.auth.patchSessionTokenPath}?${searchParams.toString()}`);
+};
+
+exports.redirectToBouncePage = redirectToBouncePage;
+//# sourceMappingURL=redirect-to-bounce-page.js.map

package/dist/cjs/server/authenticate/admin/helpers/redirect-to-bounce-page.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-to-bounce-page.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-to-bounce-page.ts"],"sourcesContent":[null],"names":["redirect"],"mappings":";;;;MAIa,oBAAoB,GAAG,CAAC,MAAmB,EAAE,GAAQ,KAAW;AAC3E,IAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;;;AAIxB,IAAA,MAAM,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;AACtC,IAAA,YAAY,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC;IAChC,YAAY,CAAC,GAAG,CACd,gBAAgB,EAChB,CAAG,EAAA,MAAM,CAAC,MAAM,CAAA,EAAG,GAAG,CAAC,QAAQ,IAAI,YAAY,CAAC,QAAQ,EAAE,CAAA,CAAE,CAC7D,CAAC;;;;AAKF,IAAA,MAAMA,sBAAQ,CACZ,CAAG,EAAA,MAAM,CAAC,IAAI,CAAC,qBAAqB,CAAA,CAAA,EAAI,YAAY,CAAC,QAAQ,EAAE,CAAA,CAAE,CAClE,CAAC;AACJ;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.js

@@ -0,0 +1,17 @@
+'use strict';
+
+var serverRuntime = require('@remix-run/server-runtime');
+
+async function redirectToShopifyOrAppRoot(request, params, responseHeaders) {
+    const { api } = params;
+    const url = new URL(request.url);
+    const host = api.utils.sanitizeHost(url.searchParams.get('host'));
+    const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
+    const redirectUrl = api.config.isEmbeddedApp
+        ? await api.auth.getEmbeddedAppUrl({ rawRequest: request })
+        : `/?shop=${shop}&host=${encodeURIComponent(host)}`;
+    throw serverRuntime.redirect(redirectUrl, { headers: responseHeaders });
+}
+
+exports.redirectToShopifyOrAppRoot = redirectToShopifyOrAppRoot;
+//# sourceMappingURL=redirect-to-shopify-or-app-root.js.map

package/dist/cjs/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-to-shopify-or-app-root.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-to-shopify-or-app-root.ts"],"sourcesContent":[null],"names":["redirect"],"mappings":";;;;AAIO,eAAe,0BAA0B,CAC9C,OAAgB,EAChB,MAAmB,EACnB,eAAyB,EAAA;AAEzB,IAAA,MAAM,EAAC,GAAG,EAAC,GAAG,MAAM,CAAC;IACrB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEjC,IAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAE,CAAC;AACpE,IAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAE,CAAC;AAEpE,IAAA,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa;AAC1C,UAAE,MAAM,GAAG,CAAC,IAAI,CAAC,iBAAiB,CAAC,EAAC,UAAU,EAAE,OAAO,EAAC,CAAC;UACvD,UAAU,IAAI,CAAA,MAAA,EAAS,kBAAkB,CAAC,IAAI,CAAC,CAAA,CAAE,CAAC;IAEtD,MAAMA,sBAAQ,CAAC,WAAW,EAAE,EAAC,OAAO,EAAE,eAAe,EAAC,CAAC,CAAC;AAC1D;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.js

@@ -0,0 +1,18 @@
+'use strict';
+
+var _const = require('../../const.js');
+
+function redirectWithAppBridgeHeaders(redirectUri) {
+    throw new Response(undefined, {
+        status: 401,
+        statusText: 'Unauthorized',
+        headers: getAppBridgeHeaders(redirectUri),
+    });
+}
+function getAppBridgeHeaders(url) {
+    return new Headers({ [_const.REAUTH_URL_HEADER]: url });
+}
+
+exports.getAppBridgeHeaders = getAppBridgeHeaders;
+exports.redirectWithAppBridgeHeaders = redirectWithAppBridgeHeaders;
+//# sourceMappingURL=redirect-with-app-bridge-headers.js.map

package/dist/cjs/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-app-bridge-headers.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-with-app-bridge-headers.ts"],"sourcesContent":[null],"names":["REAUTH_URL_HEADER"],"mappings":";;;;AAEM,SAAU,4BAA4B,CAAC,WAAmB,EAAA;AAC9D,IAAA,MAAM,IAAI,QAAQ,CAAC,SAAS,EAAE;AAC5B,QAAA,MAAM,EAAE,GAAG;AACX,QAAA,UAAU,EAAE,cAAc;AAC1B,QAAA,OAAO,EAAE,mBAAmB,CAAC,WAAW,CAAC;AAC1C,KAAA,CAAC,CAAC;AACL,CAAC;AAEK,SAAU,mBAAmB,CAAC,GAAW,EAAA;IAC7C,OAAO,IAAI,OAAO,CAAC,EAAC,CAACA,wBAAiB,GAAG,GAAG,EAAC,CAAC,CAAC;AACjD;;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/redirect-with-exitiframe.js

@@ -0,0 +1,21 @@
+'use strict';
+
+var serverRuntime = require('@remix-run/server-runtime');
+
+function redirectWithExitIframe(params, request, shop) {
+    const { api, config } = params;
+    const url = new URL(request.url);
+    const queryParams = url.searchParams;
+    const host = api.utils.sanitizeHost(queryParams.get('host'));
+    queryParams.set('shop', shop);
+    let destination = `${config.auth.path}?shop=${shop}`;
+    if (host) {
+        queryParams.set('host', host);
+        destination = `${destination}&host=${host}`;
+    }
+    queryParams.set('exitIframe', destination);
+    throw serverRuntime.redirect(`${config.auth.exitIframePath}?${queryParams.toString()}`);
+}
+
+exports.redirectWithExitIframe = redirectWithExitIframe;
+//# sourceMappingURL=redirect-with-exitiframe.js.map

package/dist/cjs/server/authenticate/admin/helpers/redirect-with-exitiframe.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect-with-exitiframe.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect-with-exitiframe.ts"],"sourcesContent":[null],"names":["redirect"],"mappings":";;;;SAIgB,sBAAsB,CACpC,MAAmB,EACnB,OAAgB,EAChB,IAAY,EAAA;AAEZ,IAAA,MAAM,EAAC,GAAG,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;IAC7B,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AAEjC,IAAA,MAAM,WAAW,GAAG,GAAG,CAAC,YAAY,CAAC;AAErC,IAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,WAAW,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;AAE9D,IAAA,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAE9B,IAAI,WAAW,GAAG,CAAA,EAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAA,MAAA,EAAS,IAAI,CAAA,CAAE,CAAC;IAErD,IAAI,IAAI,EAAE;AACR,QAAA,WAAW,CAAC,GAAG,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;AAC9B,QAAA,WAAW,GAAG,CAAG,EAAA,WAAW,CAAS,MAAA,EAAA,IAAI,EAAE,CAAC;KAC7C;AACD,IAAA,WAAW,CAAC,GAAG,CAAC,YAAY,EAAE,WAAW,CAAC,CAAC;AAE3C,IAAA,MAAMA,sBAAQ,CAAC,CAAG,EAAA,MAAM,CAAC,IAAI,CAAC,cAAc,CAAA,CAAA,EAAI,WAAW,CAAC,QAAQ,EAAE,CAAA,CAAE,CAAC,CAAC;AAC5E;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/redirect.js

@@ -0,0 +1,62 @@
+'use strict';
+
+var serverRuntime = require('@remix-run/server-runtime');
+var getSessionTokenHeader = require('../../helpers/get-session-token-header.js');
+var renderAppBridge = require('./render-app-bridge.js');
+var redirectWithAppBridgeHeaders = require('./redirect-with-app-bridge-headers.js');
+
+function redirectFactory(params, request) {
+    const { config } = params;
+    return function redirect(url, init) {
+        const { searchParams } = new URL(request.url);
+        const parsedUrl = new URL(url, config.appUrl);
+        const isSameOrigin = parsedUrl.origin === config.appUrl;
+        if (isSameOrigin || url.startsWith('/')) {
+            searchParams.forEach((value, key) => {
+                if (!parsedUrl.searchParams.has(key)) {
+                    parsedUrl.searchParams.set(key, value);
+                }
+            });
+        }
+        const target = (typeof init !== 'number' && init?.target) || '_self';
+        if (target === '_self') {
+            if (isBounceRequest(request)) {
+                throw renderAppBridge.renderAppBridge(params, request, {
+                    url: parsedUrl.toString(),
+                    target,
+                });
+            }
+            else {
+                return serverRuntime.redirect(parsedUrl.toString(), init);
+            }
+        }
+        else if (isDataRequest(request)) {
+            throw redirectWithAppBridgeHeaders.redirectWithAppBridgeHeaders(parsedUrl.toString());
+        }
+        else if (isEmbeddedRequest(request)) {
+            throw renderAppBridge.renderAppBridge(params, request, {
+                url: parsedUrl.toString(),
+                target,
+            });
+        }
+        return serverRuntime.redirect(url, init);
+    };
+}
+function isBounceRequest(request) {
+    return (Boolean(getSessionTokenHeader.getSessionTokenHeader(request)) &&
+        request.headers.has('X-Shopify-Bounce'));
+}
+function isDataRequest(request) {
+    const isGet = request.method === 'GET';
+    const sessionTokenHeader = Boolean(getSessionTokenHeader.getSessionTokenHeader(request));
+    return (sessionTokenHeader &&
+        !isBounceRequest(request) &&
+        (!isEmbeddedRequest(request) || !isGet));
+}
+function isEmbeddedRequest(request) {
+    const { searchParams } = new URL(request.url);
+    return searchParams.get('embedded') === '1';
+}
+
+exports.redirectFactory = redirectFactory;
+//# sourceMappingURL=redirect.js.map

package/dist/cjs/server/authenticate/admin/helpers/redirect.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"redirect.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/redirect.ts"],"sourcesContent":[null],"names":["renderAppBridge","remixRedirect","redirectWithAppBridgeHeaders","getSessionTokenHeader"],"mappings":";;;;;;;AAkBgB,SAAA,eAAe,CAC7B,MAAmB,EACnB,OAAgB,EAAA;AAEhB,IAAA,MAAM,EAAC,MAAM,EAAC,GAAG,MAAM,CAAC;AAExB,IAAA,OAAO,SAAS,QAAQ,CAAC,GAAG,EAAE,IAAkB,EAAA;QAC9C,MAAM,EAAC,YAAY,EAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,IAAI,GAAG,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,CAAC,CAAC;QAE9C,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,KAAK,MAAM,CAAC,MAAM,CAAC;QACxD,IAAI,YAAY,IAAI,GAAG,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE;YACvC,YAAY,CAAC,OAAO,CAAC,CAAC,KAAK,EAAE,GAAG,KAAI;gBAClC,IAAI,CAAC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE;oBACpC,SAAS,CAAC,YAAY,CAAC,GAAG,CAAC,GAAG,EAAE,KAAK,CAAC,CAAC;iBACxC;AACH,aAAC,CAAC,CAAC;SACJ;AAED,QAAA,MAAM,MAAM,GAAG,CAAC,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,EAAE,MAAM,KAAK,OAAO,CAAC;AACrE,QAAA,IAAI,MAAM,KAAK,OAAO,EAAE;AACtB,YAAA,IAAI,eAAe,CAAC,OAAO,CAAC,EAAE;AAC5B,gBAAA,MAAMA,+BAAe,CAAC,MAAM,EAAE,OAAO,EAAE;AACrC,oBAAA,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;oBACzB,MAAM;AACP,iBAAA,CAAC,CAAC;aACJ;iBAAM;gBACL,OAAOC,sBAAa,CAAC,SAAS,CAAC,QAAQ,EAAE,EAAE,IAAI,CAAC,CAAC;aAClD;SACF;AAAM,aAAA,IAAI,aAAa,CAAC,OAAO,CAAC,EAAE;AACjC,YAAA,MAAMC,yDAA4B,CAAC,SAAS,CAAC,QAAQ,EAAE,CAAC,CAAC;SAC1D;AAAM,aAAA,IAAI,iBAAiB,CAAC,OAAO,CAAC,EAAE;AACrC,YAAA,MAAMF,+BAAe,CAAC,MAAM,EAAE,OAAO,EAAE;AACrC,gBAAA,GAAG,EAAE,SAAS,CAAC,QAAQ,EAAE;gBACzB,MAAM;AACP,aAAA,CAAC,CAAC;SACJ;AAED,QAAA,OAAOC,sBAAa,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;AAClC,KAAC,CAAC;AACJ,CAAC;AAED,SAAS,eAAe,CAAC,OAAgB,EAAA;AACvC,IAAA,QACE,OAAO,CAACE,2CAAqB,CAAC,OAAO,CAAC,CAAC;QACvC,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC,EACvC;AACJ,CAAC;AAED,SAAS,aAAa,CAAC,OAAgB,EAAA;AACrC,IAAA,MAAM,KAAK,GAAG,OAAO,CAAC,MAAM,KAAK,KAAK,CAAC;IACvC,MAAM,kBAAkB,GAAG,OAAO,CAACA,2CAAqB,CAAC,OAAO,CAAC,CAAC,CAAC;AAEnE,IAAA,QACE,kBAAkB;QAClB,CAAC,eAAe,CAAC,OAAO,CAAC;SACxB,CAAC,iBAAiB,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,EACvC;AACJ,CAAC;AAED,SAAS,iBAAiB,CAAC,OAAgB,EAAA;IACzC,MAAM,EAAC,YAAY,EAAC,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;IAE5C,OAAO,YAAY,CAAC,GAAG,CAAC,UAAU,CAAC,KAAK,GAAG,CAAC;AAC9C;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/render-app-bridge.js

@@ -0,0 +1,25 @@
+'use strict';
+
+var appBridgeUrl = require('../../helpers/app-bridge-url.js');
+var addResponseHeaders = require('../../helpers/add-response-headers.js');
+var validateRedirectUrl = require('./validate-redirect-url.js');
+
+function renderAppBridge({ config }, request, redirectTo) {
+    let redirectToScript = '';
+    if (redirectTo) {
+        const destination = validateRedirectUrl.sanitizeRedirectUrl(config.appUrl, redirectTo.url);
+        const target = redirectTo.target ?? '_top';
+        redirectToScript = `<script>window.open(${JSON.stringify(destination.toString())}, ${JSON.stringify(target)})</script>`;
+    }
+    const responseHeaders = new Headers({
+        'content-type': 'text/html;charset=utf-8',
+    });
+    addResponseHeaders.addDocumentResponseHeaders(responseHeaders, config.isEmbeddedApp, new URL(request.url).searchParams.get('shop'));
+    throw new Response(`
+      <script data-api-key="${config.apiKey}" src="${appBridgeUrl.appBridgeUrl()}"></script>
+      ${redirectToScript}
+    `, { headers: responseHeaders });
+}
+
+exports.renderAppBridge = renderAppBridge;
+//# sourceMappingURL=render-app-bridge.js.map

package/dist/cjs/server/authenticate/admin/helpers/render-app-bridge.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"render-app-bridge.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/render-app-bridge.ts"],"sourcesContent":[null],"names":["sanitizeRedirectUrl","addDocumentResponseHeaders","appBridgeUrl"],"mappings":";;;;;;AAaM,SAAU,eAAe,CAC7B,EAAC,MAAM,EAAc,EACrB,OAAgB,EAChB,UAA8B,EAAA;IAE9B,IAAI,gBAAgB,GAAG,EAAE,CAAC;IAC1B,IAAI,UAAU,EAAE;AACd,QAAA,MAAM,WAAW,GAAGA,uCAAmB,CAAC,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,CAAC,CAAC;AAEvE,QAAA,MAAM,MAAM,GAAG,UAAU,CAAC,MAAM,IAAI,MAAM,CAAC;AAE3C,QAAA,gBAAgB,GAAG,CAAuB,oBAAA,EAAA,IAAI,CAAC,SAAS,CACtD,WAAW,CAAC,QAAQ,EAAE,CACvB,CAAA,EAAA,EAAK,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,YAAY,CAAC;KAC1C;AAED,IAAA,MAAM,eAAe,GAAG,IAAI,OAAO,CAAC;AAClC,QAAA,cAAc,EAAE,yBAAyB;AAC1C,KAAA,CAAC,CAAC;IACHC,6CAA0B,CACxB,eAAe,EACf,MAAM,CAAC,aAAa,EACpB,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAC9C,CAAC;IAEF,MAAM,IAAI,QAAQ,CAChB,CAAA;AAC0B,4BAAA,EAAA,MAAM,CAAC,MAAM,CAAU,OAAA,EAAAC,yBAAY,EAAE,CAAA;QAC3D,gBAAgB,CAAA;AACnB,IAAA,CAAA,EACD,EAAC,OAAO,EAAE,eAAe,EAAC,CAC3B,CAAC;AACJ;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/trigger-after-auth-hook.js

@@ -0,0 +1,17 @@
+'use strict';
+
+var createAdminApiContext = require('./create-admin-api-context.js');
+
+async function triggerAfterAuthHook(params, session, request, authStrategy) {
+    const { config, logger } = params;
+    if (config.hooks.afterAuth) {
+        logger.info('Running afterAuth hook');
+        await config.hooks.afterAuth({
+            session,
+            admin: createAdminApiContext.createAdminApiContext(session, params, authStrategy.handleClientError(request)),
+        });
+    }
+}
+
+exports.triggerAfterAuthHook = triggerAfterAuthHook;
+//# sourceMappingURL=trigger-after-auth-hook.js.map

package/dist/cjs/server/authenticate/admin/helpers/trigger-after-auth-hook.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"trigger-after-auth-hook.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/trigger-after-auth-hook.ts"],"sourcesContent":[null],"names":["createAdminApiContext"],"mappings":";;;;AAOO,eAAe,oBAAoB,CAGxC,MAAmB,EACnB,OAAgB,EAChB,OAAgB,EAChB,YAAmC,EAAA;AAEnC,IAAA,MAAM,EAAC,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAChC,IAAA,IAAI,MAAM,CAAC,KAAK,CAAC,SAAS,EAAE;AAC1B,QAAA,MAAM,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;AACtC,QAAA,MAAM,MAAM,CAAC,KAAK,CAAC,SAAS,CAAC;YAC3B,OAAO;AACP,YAAA,KAAK,EAAEA,2CAAqB,CAC1B,OAAO,EACP,MAAM,EACN,YAAY,CAAC,iBAAiB,CAAC,OAAO,CAAC,CACxC;AACF,SAAA,CAAC,CAAC;KACJ;AACH;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/validate-redirect-url.js

@@ -0,0 +1,48 @@
+'use strict';
+
+var shopifyApi = require('@shopify/shopify-api');
+
+const FILE_URI_MATCH = /\/\/\//;
+const INVALID_RELATIVE_URL = /[/\\][/\\]/;
+const WHITESPACE_CHARACTER = /\s/;
+const VALID_PROTOCOLS = ['https:', 'http:'];
+function isSafe(domain, redirectUrl, requireSSL = true) {
+    if (typeof redirectUrl !== 'string') {
+        return false;
+    }
+    if (FILE_URI_MATCH.test(redirectUrl) ||
+        WHITESPACE_CHARACTER.test(redirectUrl)) {
+        return false;
+    }
+    let url;
+    try {
+        url = new URL(redirectUrl, domain);
+    }
+    catch (error) {
+        return false;
+    }
+    if (INVALID_RELATIVE_URL.test(url.pathname)) {
+        return false;
+    }
+    if (!VALID_PROTOCOLS.includes(url.protocol)) {
+        return false;
+    }
+    if (requireSSL && url.protocol !== 'https:') {
+        return false;
+    }
+    return true;
+}
+function sanitizeRedirectUrl(domain, redirectUrl, options = {}) {
+    if (isSafe(domain, redirectUrl, options.requireSSL)) {
+        return new URL(redirectUrl, domain);
+    }
+    else if (options.throwOnInvalid === false) {
+        return undefined;
+    }
+    else {
+        throw new shopifyApi.ShopifyError('Invalid URL. Refusing to redirect');
+    }
+}
+
+exports.sanitizeRedirectUrl = sanitizeRedirectUrl;
+//# sourceMappingURL=validate-redirect-url.js.map

package/dist/cjs/server/authenticate/admin/helpers/validate-redirect-url.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-redirect-url.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/validate-redirect-url.ts"],"sourcesContent":[null],"names":["ShopifyError"],"mappings":";;;;AAUA,MAAM,cAAc,GAAG,QAAQ,CAAC;AAChC,MAAM,oBAAoB,GAAG,YAAY,CAAC;AAC1C,MAAM,oBAAoB,GAAG,IAAI,CAAC;AAClC,MAAM,eAAe,GAAG,CAAC,QAAQ,EAAE,OAAO,CAAC,CAAC;AAE5C,SAAS,MAAM,CACb,MAAc,EACd,WAAoB,EACpB,aAAkC,IAAI,EAAA;AAEtC,IAAA,IAAI,OAAO,WAAW,KAAK,QAAQ,EAAE;AACnC,QAAA,OAAO,KAAK,CAAC;KACd;AAED,IAAA,IACE,cAAc,CAAC,IAAI,CAAC,WAAW,CAAC;AAChC,QAAA,oBAAoB,CAAC,IAAI,CAAC,WAAW,CAAC,EACtC;AACA,QAAA,OAAO,KAAK,CAAC;KACd;AAED,IAAA,IAAI,GAAQ,CAAC;AAEb,IAAA,IAAI;QACF,GAAG,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAC,CAAC;KACpC;IAAC,OAAO,KAAK,EAAE;AACd,QAAA,OAAO,KAAK,CAAC;KACd;IAED,IAAI,oBAAoB,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;AAC3C,QAAA,OAAO,KAAK,CAAC;KACd;IAED,IAAI,CAAC,eAAe,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE;AAC3C,QAAA,OAAO,KAAK,CAAC;KACd;IAED,IAAI,UAAU,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,EAAE;AAC3C,QAAA,OAAO,KAAK,CAAC;KACd;AAED,IAAA,OAAO,IAAI,CAAC;AACd,CAAC;AAEK,SAAU,mBAAmB,CACjC,MAAc,EACd,WAAoB,EACpB,UAAsB,EAAgB,EAAA;IAEtC,IAAI,MAAM,CAAC,MAAM,EAAE,WAAW,EAAE,OAAO,CAAC,UAAU,CAAC,EAAE;AACnD,QAAA,OAAO,IAAI,GAAG,CAAC,WAAW,EAAE,MAAM,CAAqC,CAAC;KACzE;AAAM,SAAA,IAAI,OAAO,CAAC,cAAc,KAAK,KAAK,EAAE;AAC3C,QAAA,OAAO,SAA6C,CAAC;KACtD;SAAM;AACL,QAAA,MAAM,IAAIA,uBAAY,CAAC,mCAAmC,CAAC,CAAC;KAC7D;AACH;;;;"}

package/dist/cjs/server/authenticate/admin/helpers/validate-shop-and-host-params.js

@@ -0,0 +1,27 @@
+'use strict';
+
+var serverRuntime = require('@remix-run/server-runtime');
+
+function validateShopAndHostParams(params, request) {
+    const { api, config, logger } = params;
+    if (config.isEmbeddedApp) {
+        const url = new URL(request.url);
+        const shop = api.utils.sanitizeShop(url.searchParams.get('shop'));
+        if (!shop) {
+            logger.debug('Missing or invalid shop, redirecting to login path', {
+                shop,
+            });
+            throw serverRuntime.redirect(config.auth.loginPath);
+        }
+        const host = api.utils.sanitizeHost(url.searchParams.get('host'));
+        if (!host) {
+            logger.debug('Invalid host, redirecting to login path', {
+                host: url.searchParams.get('host'),
+            });
+            throw serverRuntime.redirect(config.auth.loginPath);
+        }
+    }
+}
+
+exports.validateShopAndHostParams = validateShopAndHostParams;
+//# sourceMappingURL=validate-shop-and-host-params.js.map

package/dist/cjs/server/authenticate/admin/helpers/validate-shop-and-host-params.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"validate-shop-and-host-params.js","sources":["../../../../../../../src/server/authenticate/admin/helpers/validate-shop-and-host-params.ts"],"sourcesContent":[null],"names":["redirect"],"mappings":";;;;AAGgB,SAAA,yBAAyB,CACvC,MAAmB,EACnB,OAAgB,EAAA;IAEhB,MAAM,EAAC,GAAG,EAAE,MAAM,EAAE,MAAM,EAAC,GAAG,MAAM,CAAC;AAErC,IAAA,IAAI,MAAM,CAAC,aAAa,EAAE;QACxB,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;AACjC,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,CAAC,KAAK,CAAC,oDAAoD,EAAE;gBACjE,IAAI;AACL,aAAA,CAAC,CAAC;YACH,MAAMA,sBAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SACvC;AAED,QAAA,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,YAAY,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAE,CAAC,CAAC;QACnE,IAAI,CAAC,IAAI,EAAE;AACT,YAAA,MAAM,CAAC,KAAK,CAAC,yCAAyC,EAAE;gBACtD,IAAI,EAAE,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC;AACnC,aAAA,CAAC,CAAC;YACH,MAAMA,sBAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;SACvC;KACF;AACH;;;;"}