@things-factory/integration-marketplace 8.0.0-beta.9 → 8.0.2

package/server/routers/shopify-private-router.ts

@@ -0,0 +1,78 @@
+import Router from 'koa-router'
+import { v4 as uuidv4 } from 'uuid'
+
+import { VerificationToken, VerificationTokenType } from '@things-factory/auth-base'
+import { config } from '@things-factory/env'
+import { getRepository, getUrlFromContext } from '@things-factory/shell'
+
+import { Shopify } from '../controllers/shopify'
+import { MarketplaceSetting, MarketplaceStore } from '../entities'
+import { STORE_STATUS } from '../graphql/constants'
+
+const shopifyConfig = config.get('marketplaceIntegrationShopify', {})
+const { apiKey, apiSecret } = shopifyConfig
+const isPathBaseDomain = !config.get('subdomain') && !config.get('useVirtualHostBasedDomain')
+
+const debug = require('debug')('things-factory:integration-marketplace:shopify-private-router')
+
+export const shopifyPrivateRouter = new Router()
+
+shopifyPrivateRouter.get(
+  `${isPathBaseDomain ? '/domain/:domain' : ''}/callback-shopify-install`,
+  async (context, next) => {
+    // https://example.org/callback-shopify-install?shop={shop}&hmac=da9d83c171400a41f8db91a950508985&timestamp=1409617544
+    const { hmac, timestamp } = context.query
+    const { domain, user } = context.state
+
+    let shop: any = context.query.shop
+    shop = shop.replace('.myshopify.com', '')
+
+    const shopify = new Shopify({ apiKey, apiSecret, shop })
+
+    // need to get or save marketplace-store here
+    var marketplaceStore = await getRepository(MarketplaceStore).findOne({
+      where: {
+        domain: { id: domain.id },
+        storeId: shop,
+        platform: 'shopify'
+      }
+    })
+
+    if (!marketplaceStore) {
+      marketplaceStore = await getRepository(MarketplaceStore).save({
+        domain,
+        platform: 'shopify',
+        name: shop,
+        storeId: shop,
+        countryCode: '',
+        status: STORE_STATUS.INACTIVE,
+        creator: user,
+        updater: user
+      })
+    }
+
+    const marketplaceSetting = new MarketplaceSetting()
+    marketplaceSetting.name = uuidv4()
+    marketplaceSetting.marketplaceStore = marketplaceStore
+    marketplaceSetting.value = '100'
+    marketplaceSetting.category = 'stock_allocation'
+    marketplaceSetting.domain = marketplaceStore.domain
+    marketplaceSetting.creator = marketplaceStore.creator
+    await getRepository(MarketplaceSetting).save(marketplaceSetting)
+
+    /* generate verification-token as a nonce */
+    const nonce = shopify.makeVerificationTokenForNonce()
+    await getRepository(VerificationToken).save({
+      userId: user.id,
+      token: nonce,
+      type: VerificationTokenType.REQUEST_ACCESS_TOKEN,
+      suppliment: marketplaceStore.id
+    })
+
+    const redirectUrl = getUrlFromContext(context, '/callback-shopify')
+    const redirectTo = shopify.buildAuthURL(redirectUrl, nonce)
+
+    debug('get:/callback-shopify-install', redirectTo)
+    context.redirect(redirectTo)
+  }
+)

package/server/routers/shopify-public-router.ts

@@ -0,0 +1,182 @@
+import Router from 'koa-router'
+import fetch from 'node-fetch'
+import { v4 as uuidv4 } from 'uuid'
+
+import { User, VerificationToken, VerificationTokenType } from '@things-factory/auth-base'
+import { config } from '@things-factory/env'
+import { getRedirectSubdomainPath, getRepository } from '@things-factory/shell'
+
+import { StoreAPI } from '../controllers/store-api'
+import { MarketplaceSetting, MarketplaceStore } from '../entities'
+import { STORE_STATUS } from '../graphql/constants'
+
+const shopifyConfig = config.get('marketplaceIntegrationShopify', {})
+const { apiKey, apiSecret } = shopifyConfig
+
+const debug = require('debug')('things-factory:integration-marketplace:shopify-public-router')
+
+export const shopifyPublicRouter = new Router()
+
+shopifyPublicRouter.get('/callback-shopify', async (context, next) => {
+  try {
+    // https://example.org/some/redirect/uri?code={authorization_code}&hmac=da9d83c171400a41f8db91a950508985&timestamp=1409617544&state={nonce}&shop={hostname}
+    const { code, hmac, timestamp, state: nonce, shop: hostname } = context.query
+
+    const verificationTokenRepository = getRepository(VerificationToken)
+
+    var verification: VerificationToken = await verificationTokenRepository.findOne({
+      where: {
+        token: nonce,
+        type: VerificationTokenType.REQUEST_ACCESS_TOKEN
+      }
+    })
+
+    const { userId, suppliment: marketplaceStoreId } = verification
+
+    await verificationTokenRepository.delete({
+      userId,
+      token: nonce,
+      type: VerificationTokenType.REQUEST_ACCESS_TOKEN
+    })
+
+    var store = await StoreAPI.getMarketplaceStore(marketplaceStoreId)
+    const storeId = store.storeId
+
+    const response = await fetch(`https://${storeId}.myshopify.com/admin/oauth/access_token`, {
+      method: 'post',
+      headers: {
+        'Content-Type': 'application/json'
+      },
+      body: JSON.stringify({
+        client_id: apiKey,
+        client_secret: apiSecret,
+        code
+      })
+    })
+
+    if (response.ok) {
+      var body = await response.json()
+      var { access_token } = body
+      if (!access_token) {
+        const message = `failed to get access-token from shopify : ${JSON.stringify(body, null, 2)}`
+        debug(message)
+        throw new Error(message)
+      }
+    } else {
+      const message = `failed to get access-token from shopify : ${response.status}, ${await response.text()}`
+      debug(message)
+      throw new Error(message)
+    }
+
+    var patch = {
+      accessToken: access_token,
+      refreshToken: '',
+      accessInfo: JSON.stringify(body, null, 2),
+      storeId: storeId,
+      status: STORE_STATUS.ACTIVE
+    }
+
+    var user = await getRepository(User).findOneBy({ id: userId })
+
+    store = await getRepository(MarketplaceStore).save({
+      ...store,
+      ...patch,
+      updater: user
+    })
+
+    const marketplaceSetting = new MarketplaceSetting()
+    marketplaceSetting.name = uuidv4()
+    marketplaceSetting.marketplaceStore = store
+    marketplaceSetting.value = '100'
+    marketplaceSetting.category = 'stock_allocation'
+    marketplaceSetting.domain = store.domain
+    marketplaceSetting.creator = store.creator
+    await getRepository(MarketplaceSetting).save(marketplaceSetting)
+
+    var message = 'success to activate'
+    context.redirect(
+      `${getRedirectSubdomainPath(context, store.domain.subdomain)}marketplace-store-shopify/${
+        store.id
+      }/connect-callback?status=${store.status}&message=${message}`
+    )
+  } catch (err) {
+    var message: string = err.message
+
+    if (store) {
+      context.redirect(
+        `${getRedirectSubdomainPath(context, store.domain.subdomain)}marketplace-store-shopify/${
+          store.id
+        }/connect-callback?status=${store.status}&message=${message}`
+      )
+      return
+    }
+
+    throw err
+  }
+})
+
+shopifyPublicRouter.post('/webhook-shopify/customers/redact', async (context, next) => {
+  // When a store owner requests deletion of data on behalf of a customer,
+  // Shopify sends a payload on the customers/redact topic to the apps installed on that store.
+  // If the customer hasn't placed an order in the past six months,
+  // then Shopify sends the payload 10 days after their request.
+  // Otherwise, the the request will be withheld until 6 months have passed.
+  // If your app has been granted access to the store's customers or orders,
+  // then you receive a redaction request webhook with the resource IDs that you need to redact or delete.
+  // In some cases, a customer record contains only the customer's email address.
+  //
+  // https://shopify.dev/tutorials/add-gdpr-webhooks-to-your-app
+  // {
+  //   "shop_id": 954889,
+  //   "shop_domain": "snowdevil.myshopify.com",
+  //   "customer": {
+  //     "id": 191167,
+  //     "email": "john@email.com",
+  //     "phone": "555-625-1199"
+  //   },
+  //   "orders_to_redact": [299938, 280263, 220458]
+  // }
+
+  context.status = 200
+})
+
+shopifyPublicRouter.post('/webhook-shopify/shop/redact', async (context, next) => {
+  // 48 hours after a store owner uninstalls your app,
+  // Shopify sends you a shop/redact webhook.
+  // This webhook provides the store's shop_id and shop_domain so that you can erase the customer information
+  // for that store from your database.
+  //
+  // https://shopify.dev/tutorials/add-gdpr-webhooks-to-your-app
+  // {
+  //   "shop_id": 954889,
+  //   "shop_domain": "snowdevil.myshopify.com"
+  // }
+
+  context.status = 200
+})
+
+shopifyPublicRouter.post('/webhook-shopify/customers/data_request', async (context, next) => {
+  // When a customer requests their data from a store owner,
+  // Shopify sends a payload on the customers/data_request topic to the apps installed on that store.
+  // If your app has been granted access to customers or orders,
+  // then you receive a data request webhook with the resource IDs of the data that you need to provide to the store owner.
+  // It's your responsibility to provide this data to the store owner directly.
+  // In some cases, a customer record contains only the customer's email address.
+  //
+  // https://shopify.dev/tutorials/add-gdpr-webhooks-to-your-app
+  // {
+  //   "shop_id": 954889,
+  //   "shop_domain": "snowdevil.myshopify.com",
+  //   "orders_requested": [299938, 280263, 220458],
+  //   "customer": {
+  //     "id": 191167,
+  //     "email": "john@email.com",
+  //     "phone":  "555-625-1199"
+  //   },
+  //   "data_request": {
+  //     "id": 9999
+  //   }
+  // }
+
+  context.status = 200
+})

package/server/routers/woocommerce-router.ts

@@ -0,0 +1,70 @@
+import Router from 'koa-router'
+import { v4 as uuidv4 } from 'uuid'
+
+import { getRepository } from '@things-factory/shell'
+
+import { MarketplaceSetting, MarketplaceStore } from '../entities'
+import { STORE_STATUS } from '../graphql/constants'
+
+export const woocommerceRouter = new Router()
+
+/**
+ * @summary Callback After Authentication
+ * @description When the callback is triggered, we will receive key_id, user_id, consumer_key and consumer_secret
+ * from Woocommerce. We store them into database for easy retrieval.
+ */
+export type WoocommerAccessInfo = {
+  key_id: number
+  user_id: string
+  consumer_key: string
+  consumer_secret: string
+  key_permission: 'read' | 'write' | 'read_write'
+}
+
+woocommerceRouter.post('/callback-woocommerce', async (context, next) => {
+  try {
+    const accessInfo: WoocommerAccessInfo = context.request.body
+    await saveWoocommerceAccessInfo(accessInfo)
+    context.status = 200
+    next()
+  } catch (e) {
+    throw e
+  }
+})
+
+async function saveWoocommerceAccessInfo(accessInfo: WoocommerAccessInfo): Promise<MarketplaceStore> {
+  const {
+    key_id: storeId,
+    user_id: marketplaceStoreId,
+    consumer_key: accessKey,
+    consumer_secret: accessSecret
+  } = accessInfo
+
+  let marketplaceStore: MarketplaceStore = await getRepository(MarketplaceStore).findOneBy({ id: marketplaceStoreId })
+  marketplaceStore.accessKey = accessKey
+  marketplaceStore.accessSecret = accessSecret
+  marketplaceStore.accessInfo = JSON.stringify(accessInfo, null, 2)
+  marketplaceStore.storeId = String(storeId)
+  marketplaceStore.status = STORE_STATUS.ACTIVE
+
+  const marketplaceSettingCategories: any[] = ['stock_allocation', 'marketplace_order_max_weight']
+
+  marketplaceSettingCategories.forEach(async category => {
+    const foundMarketplaceSetting: MarketplaceSetting = await getRepository(MarketplaceSetting).findOne({
+      where: { marketplaceStore: { id: marketplaceStore.id }, domain: { id: marketplaceStore.domain.id }, category }
+    })
+
+    if (!foundMarketplaceSetting) {
+      const marketplaceSetting = new MarketplaceSetting()
+      marketplaceSetting.name = uuidv4()
+      marketplaceSetting.marketplaceStore = marketplaceStore
+      marketplaceSetting.value = '100'
+      marketplaceSetting.category = category
+      marketplaceSetting.domain = marketplaceStore.domain
+      marketplaceSetting.creator = marketplaceStore.creator
+      await getRepository(MarketplaceSetting).save(marketplaceSetting)
+    }
+  })
+
+  return await getRepository(MarketplaceStore).save(marketplaceStore)
+}

package/server/routes.ts

@@ -0,0 +1,21 @@
+import { shopifyPublicRouter } from './routers/shopify-public-router'
+// import { shopifyPrivateRouter } from './routers/shopify-private-router'
+import { shopifyInstallPublicRouter } from './routers/shopify-install-public-router'
+import { shopifyInstallPrivateRouter } from './routers/shopify-install-private-router'
+import { woocommerceRouter } from './routers/woocommerce-router'
+import { magentoPublicRouter } from './routers/magento-public-router'
+import { magentoPrivateRouter } from './routers/magento-private-router'
+
+process.on('bootstrap-module-global-public-route' as any, (app, globalPublicRouter) => {
+  globalPublicRouter.use(shopifyPublicRouter.routes(), shopifyPublicRouter.allowedMethods())
+  globalPublicRouter.use(shopifyInstallPublicRouter.routes(), shopifyInstallPublicRouter.allowedMethods())
+
+  globalPublicRouter.use(woocommerceRouter.routes(), woocommerceRouter.allowedMethods())
+  globalPublicRouter.use(magentoPublicRouter.routes(), magentoPublicRouter.allowedMethods())
+})
+
+process.on('bootstrap-module-domain-private-route' as any, (app, domainPrivateRouter) => {
+  // domainPrivateRouter.use(shopifyPrivateRouter.routes(), shopifyPrivateRouter.allowedMethods())
+  domainPrivateRouter.use(shopifyInstallPrivateRouter.routes(), shopifyInstallPrivateRouter.allowedMethods())
+  domainPrivateRouter.use(magentoPrivateRouter.routes(), magentoPrivateRouter.allowedMethods())
+})