shopify-app-js 0.0.1-security → 1.0.1

package/RELEASING.md

@@ -0,0 +1,142 @@
+# Releasing shopify-app-js
+
+## General overview of the release process
+
+The `shopify-app-js` repo uses `changesets` to track and update the `CHANGELOG.md` file, as well as to publish to NPM.
+
+### For fixes and new functionality that are being published _without_ using any release candidates
+
+1. The developer creates a branch with their change using `main` as the base branch, opens a PR to obtain the necessary feedback, makes any required updates and obtains approval from the maintainers.
+
+1. The developer merges their PR, which merges their branch into `main`. This triggers the `main-release.yml` workflow.
+
+1. The `main-release.yml` workflow will create a branch called `changeset-release/main` and a corresponding PR called `Packages for release` (or update the branch and PR if they already exist). This branch/PR contains the necessary updates to the `CHANGELOG.md` file that will be included in the release, as well as any updates (e.g., version) to the `package.json` file.
+
+1. When ready to release, merging the `Packages for release` PR will update `main` with the contents of the `changeset-release/main` branch, and will automatically publish the package(s) to NPM.
+
+### If release candidates are used to obtain feedback from the community prior to an upcoming release
+
+1. Prior to the development of breaking changes (for which pre-releases are being used), the `release-candidate` branch is created from `main` and put into _pre-release_ mode using the `yarn changeset` command (see details in the [release candidates](#release-candidates) section below).
+
+1. The developer creates a branch with their change using `release-candidate` as the base branch, obtains the necessary feedback, makes any required updates and obtains approval from the maintainers.
+
+1. The developer merges their PR, which merges their branch into `release-candidate`. This triggers the `release-candidate.yml` workflow.
+
+1. The `release-candidate.yml` workflow will create a branch called `changeset-release/release-candidate` and a corresponding PR called `Packages for release-candidate (rc)` (or update the branch and PR if they already exist). This branch/PR contains the necessary updates to the `CHANGELOG.md` file that will be included in the release candidate, as well as any updates (e.g., version) to the `package.json` file.
+
+1. When ready to publish the release candidate, merging the `Packages for release-candidate (rc)` PR will update the `release-candidate` branch with the contents of the `changeset-release/release-candidate` branch, and will automatically publish the release candidate package(s) to NPM.
+
+1. When ready to publish as the next general release, the `release-candidate` branch is taken out of _pre-release_ mode using the `yarn changeset` command (see details in the [release candidates](#release-candidates) section below).
+
+1. Create a PR to merge the `release-candidate` branch into `main` and proceed as per the [general release process above](#for-fixes-and-new-functionality-that-are-being-published-without-using-any-release-candidates)
+
+See the sections below for specific details related to the steps outlined above.
+
+---
+
+## Notes before releasing
+
+- Check the Semantic Versioning page for info on how to version the new release: [http://semver.org](http://semver.org)
+
+- When creating a PR, the author should run the `yarn changeset` command, answer the relevant questions (i.e., is it major/minor/patch, what is the change description), then add and commit the new file tht was created in the `.changeset` directory. These files are used by the workflows to construct the `CHANGELOG.md` entries.
+
+  > **Note**
+  > If the change is very small and doesn't warrant a changelog entry, run `yarn changeset --empty` and commit the resultant file in the `.changeset` directory.
+
+---
+
+## :exclamation: To perform a release
+
+1. Checkout the `changeset-release/main` branch
+
+   ```shell
+   git checkout changeset-release/main
+   ```
+
+1. If releasing the Express package, update the version string in the `packages/shopify-app-express/src/version.ts` file to match the version in the `packages/shopify-app-express/package.json` file.
+1. If releasing the Remix package, update the version string in the `packages/shopify-app-remix/src/version.ts` file to match the version in the `packages/shopify-app-remix/package.json` file.
+
+1. If needed, edit/remove any of the comments in the `CHANGELOG.md` files and commit them to the `changeset-release/main` branch.
+
+1. Once the files in the PR reflect the desired release changes, merge the `Packages for release` PR into `main` - this triggers the release.
+
+1. The same `changesets/action` in the `main-release.yml` workflow will call `yarn release`, which builds the packages and pushes the changed packages to `npmjs.org`.
+
+1. After the release, there will no longer be a `Packages for release` PR. `changesets` will re-create it when a branch that contains `changesets`-created changelog files is merged into `main`.
+
+---
+
+## Release Candidates
+
+For significant API changes that could result in significant refactoring on the part of developers, consider releasing a few _Release Candidate_ versions in advance of the final version.
+
+> **Warning**
+>
+> These changes **must** be made against the `release-candidate` branch, so that the appropriate workflows can run (`release-candidate.yml`).
+
+> **Warning**
+>
+> Before commencing the effort for a batch of release candidates, make sure the `release-candidate` branch an identical copy of `main`.
+
+- Prior to creating the first PR against the `release-candidate` branch, run the `yarn changeset pre enter rc` command and commit the resultant files from `.changeset`, including the `pre.json` file. This informs `changesets` that it is in pre-release mode, and that the pre-release tag is `rc`.
+
+- When creating a PR, the author should run the `yarn changeset` command, answer the relevant questions (i.e., is it major/minor/patch, what is the change description), and then commit the new file created in the `.changeset` directory. These files are used by the workflows to construct the `CHANGELOG.md` entries for the release candidates.
+
+  > **Note**
+  > If the change is very small and doesn't warrant a changelog entry, run `yarn changeset --empty` and commit the resultant file in the `.changeset` directory.
+
+- When the PR is merged into the `release-candidate` branch, the `release-candidate.yml` workflow uses the `changesets/action` to either create or update an existing PR that has the title `Packages for release-candidate (rc)`.
+
+### :exclamation: To perform a release of release candidate packages
+
+1. Checkout the `changeset-release/release-candidate` branch
+
+   ```shell
+   git checkout changeset-release/release-candidate
+   ```
+
+1. If releasing the Express package, update the version string in the `packages/shopify-app-express/src/version.ts` file to match the version in the `packages/shopify-app-express/package.json` file. Make sure to add an `-rc.X` to the version, like so:
+
+   ```text
+   2.0.0-rc.1
+   ```
+
+1. If releasing the Remix package, update the version string in the `packages/shopify-app-remix/src/version.ts` file to match the version in the `packages/shopify-app-remix/package.json` file. Make sure to add an `-rc.X` to the version, like so:
+
+   ```text
+   2.0.0-rc.1
+   ```
+
+1. If needed, edit/remove any of the comments in the changed `CHANGELOG.md` files and commit them to the `changeset-release/release-candidate` branch.
+
+1. Once the files in the PR reflect the desired release changes, merge the `Packages for release-candidate (rc)` PR into `release-candidate` - this triggers the release.
+
+1. The same `changesets/action` in the `release-candidate.yml` workflow will call `yarn release`, which builds and pushes the release candidates to `npmjs.org`.
+
+1. After the release, there will no longer be a `Packages for release-candidate (rc)` PR. `changesets` will re-create it when a branch that contains `changesets`-created changelog files is merged into `release-candidate`.
+
+## Merging `release-candidate` into `main` (moving from pre-release to main release)
+
+When a major set of changes is about to be mass released from the `release-candidate` branch
+
+> **Warning**
+>
+> The next steps need to be confirmed
+
+1. Checkout the `release-candidate` branch
+
+   ```shell
+   git checkout release-candidate
+   ```
+
+1. Take the `release-candidate` branch out of pre-release mode by running
+
+   ```shell
+   yarn changeset pre exit
+   ```
+
+   And commit the changed files.
+
+1. Create a PR to merge the `release-candidate` branch into `main`.
+
+1. Once that PR is merged, follow the [to perform a release](#exclamation-to-perform-a-release) outlined above.

package/loom.config.ts

@@ -0,0 +1,115 @@
+import {createWorkspace, createWorkspacePlugin} from '@shopify/loom';
+import {buildLibraryWorkspace} from '@shopify/loom-plugin-build-library';
+import {eslint} from '@shopify/loom-plugin-eslint';
+import {prettier} from '@shopify/loom-plugin-prettier';
+import {Config} from '@jest/types';
+
+import type {} from '@shopify/loom-plugin-jest';
+
+export default createWorkspace((workspace) => {
+  workspace.use(
+    buildLibraryWorkspace(),
+    eslint(),
+    prettier({files: '**/*.{json,md}'}),
+    jestWorkspaceConfigPlugin(),
+  );
+});
+
+function jestWorkspaceConfigPlugin() {
+  return createWorkspacePlugin(
+    'shopify-app-js--workplace-setup',
+    ({tasks: {test}}) => {
+      test.hook(({hooks}) => {
+        hooks.configure.hook((configure) => {
+          configure.jestSetupFilesAfterEnv?.hook((files) => [
+            ...files,
+            '../../tests/setup/setup-jest.ts',
+          ]);
+          configure.jestConfig?.hook((config) => {
+            return {
+              ...config,
+              projects: configureProjects(
+                config.projects as Config.InitialProjectOptions[],
+              ),
+              testTimeout: 30000,
+            };
+          });
+        });
+      });
+    },
+  );
+}
+
+function configureProjects(projects: Config.InitialProjectOptions[]) {
+  return setTransformIgnorePatterns(projects).reduce((acc, project) => {
+    if (
+      typeof project !== 'string' &&
+      project.displayName === 'shopify-app-remix'
+    ) {
+      return acc.concat(forkRemixProject(project));
+    }
+
+    return acc.concat(project);
+  }, [] as Config.InitialProjectOptions[]);
+}
+
+/**
+ * Some ESM-only packages need to be included in jest transforms for them to work. This function adds them to the
+ * transformIgnorePatterns array for each project.
+ */
+function setTransformIgnorePatterns(projects: Config.InitialProjectOptions[]) {
+  return projects.map((project) => {
+    return {
+      ...project,
+      transformIgnorePatterns: [
+        ...(project.transformIgnorePatterns || []),
+        'node_modules/(?!@web3-storage)',
+      ],
+    };
+  });
+}
+
+/**
+ * The remix project is a bit of a special case because we need to run its tests in two different environments, one
+ * using jsdom and the other, node.
+ *
+ * To achieve that, we create two separate projects which copy all of the settings from the original project, overriding
+ * the test environment and making them mutually exclusive.
+ */
+function forkRemixProject(project: Config.InitialProjectOptions) {
+  return [
+    {
+      ...project,
+      displayName: 'shopify-app-remix-react',
+      testEnvironment: 'jsdom',
+      testPathIgnorePatterns: ['src/server'],
+    },
+    {
+      ...project,
+      setupFilesAfterEnv: [
+        ...(project.setupFilesAfterEnv ?? []),
+        '../../packages/shopify-app-remix/src/server/adapters/node/__tests__/setup-jest.ts',
+      ],
+      displayName: 'shopify-app-remix-server-node',
+      testEnvironment: 'node',
+      testPathIgnorePatterns: ['src/react', 'src/server/adapters/__tests__'],
+    },
+    {
+      ...project,
+      setupFilesAfterEnv: [
+        ...(project.setupFilesAfterEnv ?? []),
+        '../../packages/shopify-app-remix/src/server/adapters/vercel/__tests__/setup-jest.ts',
+      ],
+      displayName: 'shopify-app-remix-server-vercel',
+      testEnvironment: 'node',
+      testPathIgnorePatterns: ['src/react', 'src/server/adapters/__tests__'],
+    },
+    {
+      ...project,
+      testRegex: undefined,
+      displayName: 'shopify-app-remix-server-adapters',
+      testMatch: ['<rootDir>/src/server/adapters/__tests__/**/*'],
+      testEnvironment: 'node',
+    },
+  ];
+}

package/package.json

@@ -1,6 +1,47 @@
 {
   "name": "shopify-app-js",
-  "version": "0.0.1-security",
-  "description": "security holding package",
-  "repository": "npm/security-holder"
+  "version": "1.0.1",
+  "license": "UNLICENSED",
+  "scripts": {
+    "preinstall": "node tests/build.js",
+    "build": "loom build",
+    "test": "loom test",
+    "lint": "loom lint",
+    "release": "loom build && changeset publish",
+    "clean": "rimraf ./packages/*/build .loom"
+  },
+  "devDependencies": {
+    "@changesets/cli": "^2.27.1",
+    "@jest/types": "^29.6.3",
+    "@shopify/eslint-plugin": "^44.0.0",
+    "@shopify/loom": "^1.0.2",
+    "@shopify/loom-cli": "^1.1.0",
+    "@shopify/loom-plugin-build-library": "^1.0.3",
+    "@shopify/loom-plugin-eslint": "^2.0.1",
+    "@shopify/loom-plugin-jest": "^1.0.2",
+    "@shopify/loom-plugin-prettier": "^2.0.1",
+    "@shopify/prettier-config": "^1.1.2",
+    "@shopify/typescript-configs": "^5.1.0",
+    "@types/jest": "^29.5.12",
+    "eslint": "^8.55.0",
+    "eslint-plugin-prettier": "^5.1.3",
+    "jest": "^29.7.0",
+    "jest-environment-jsdom": "^29.7.0",
+    "jest-fetch-mock": "^3.0.3",
+    "jest-runner-eslint": "^2.1.2",
+    "prettier": "^3.2.5",
+    "rimraf": "^5.0.5",
+    "ts-jest": "^29.1.2",
+    "tslib": "^2.6.2",
+    "typescript": "5.3.3"
+  },
+  "dependencies": {},
+  "resolutions": {
+    "jest": "^29.7.0",
+    "jest-circus": "^29.7.0",
+    "ts-jest": "^29.1.2"
+  },
+  "workspaces": [
+    "packages/*"
+  ]
 }

package/packages/.prettierrc

@@ -0,0 +1 @@
+"@shopify/prettier-config"

package/packages/shopify-app-express/CHANGELOG.md

@@ -0,0 +1,316 @@
+# Changelog
+
+## 4.1.2
+
+### Patch Changes
+
+- 6deb1bd: Updated dependency on `semver`
+
+## 4.1.1
+
+### Patch Changes
+
+- b1ddc74: Return a 403 with X-Shopify headers on XHR requests for non-embedded apps, instead of a 302. The 302 ran into CORS errors and always failed.
+
+  These requests will return the following headers:
+
+  - `X-Shopify-Api-Request-Failure-Reauthorize`: `1`
+  - `X-Shopify-Api-Request-Failure-Reauthorize-Url`: <URL>
+
+- 02a8341: Updated dependency on `@shopify/shopify-api` to 9.3.1
+- 321d6a4: Update @shopify/shopify-api to 9.3.2
+- Updated dependencies [02a8341]
+- Updated dependencies [321d6a4]
+  - @shopify/shopify-app-session-storage-memory@3.0.1
+  - @shopify/shopify-app-session-storage@2.1.1
+
+## 4.1.0
+
+### Minor Changes
+
+- 64e0246: Update shopify-api version to 9.2.0
+
+### Patch Changes
+
+- f5742c1: Updated dependency on `@shopify/shopify-api`
+- Updated dependencies [f5742c1]
+- Updated dependencies [64e0246]
+  - @shopify/shopify-app-session-storage-memory@3.0.0
+  - @shopify/shopify-app-session-storage@2.1.0
+
+## 4.0.1
+
+### Patch Changes
+
+- b4eeb24: Improved and simplified package.json dependencies
+- b998c30: Bump shopify-api version from 9.0.1 to 9.0.2
+- d8f8436: Replaced query() internal call in the GraphQL client with request()
+- Updated dependencies [b4eeb24]
+- Updated dependencies [b998c30]
+  - @shopify/shopify-app-session-storage-memory@2.0.4
+  - @shopify/shopify-app-session-storage@2.0.4
+
+## 4.0.0
+
+### Major Changes
+
+- d3e4b5e: Updated `@shopify/shopify-api` to the latest major version. Please follow [the v9 migration guide](https://github.com/Shopify/shopify-api-js/blob/main/packages/shopify-api/docs/migrating-to-v9.md) to update your app.
+
+### Patch Changes
+
+- Updated dependencies [d3e4b5e]
+  - @shopify/shopify-app-session-storage-memory@2.0.3
+  - @shopify/shopify-app-session-storage@2.0.3
+
+## 3.0.2
+
+### Patch Changes
+
+- 3685bd4: Bump shopify-api to ^8.1.1
+- Updated dependencies [3685bd4]
+  - @shopify/shopify-app-session-storage-memory@2.0.2
+  - @shopify/shopify-app-session-storage@2.0.2
+
+## 3.0.1
+
+### Patch Changes
+
+- 6d12840: Updating dependencies on @shopify/shopify-api
+- Updated dependencies [6d12840]
+  - @shopify/shopify-app-session-storage-memory@2.0.1
+  - @shopify/shopify-app-session-storage@2.0.1
+
+## 3.0.0
+
+### Major Changes
+
+- f837060: **Removed support for Node 14**
+
+  Node 14 has reached its [EOL](https://endoflife.date/nodejs), and dependencies to this package no longer work on Node 14.
+  Because of that, we can no longer support that version.
+
+  If your app is running on Node 14, you'll need to update to a more recent version before upgrading this package.
+
+  This upgrade does not require any code changes.
+
+#### Changes to the `ShopifyApp` type
+
+Previously, the `ShopifyApp` type accepted 2 generic types: the REST resources and the session storage class.
+In v3, that type accepts 1 generic: the params given to the `shopifyApp()` function, which contains both of the previous types, and more.
+
+Apps shouldn't need to use that type directly since `shopifyApp()` is able to extract the types from the parameters it's given.
+If you need to explicitly set those generics, you'll need to use the `AppConfigParams` type.
+
+<details>
+<summary>See an example</summary>
+
+Before:
+
+```ts
+import {ShopifyApp} from '@shopify/shopify-app-express';
+import {restResources} from '@shopify/shopify-api/rest/admin/2023-10';
+import {MemorySessionStorage} from '@shopify/shopify-app-session-storage-memory';
+
+const myVariable: ShopifyApp<typeof restResources, MemorySessionStorage>;
+```
+
+After:
+
+```ts
+import {ShopifyApp, AppConfigParams} from '@shopify/shopify-app-express';
+import {restResources} from '@shopify/shopify-api/rest/admin/2023-10';
+import {MemorySessionStorage} from '@shopify/shopify-app-session-storage-memory';
+
+const myVariable: ShopifyApp<
+  AppConfigParams<typeof restResources, MemorySessionStorage>
+>;
+```
+
+</details>
+
+### Patch Changes
+
+- a69d6fc: Updating dependency on @shopify/shopify-api to v.8.0.1
+- Updated dependencies [f837060]
+- Updated dependencies [a69d6fc]
+  - @shopify/shopify-app-session-storage@2.0.0
+  - @shopify/shopify-app-session-storage-memory@2.0.0
+
+## 2.2.4
+
+### Patch Changes
+
+- 616388d: Updating dependency on @shopify/shopify-api to 7.7.0
+- Updated dependencies [616388d]
+  - @shopify/shopify-app-session-storage-memory@1.0.13
+  - @shopify/shopify-app-session-storage@1.1.10
+
+## 2.2.3
+
+### Patch Changes
+
+- 5b862fe: Upgraded shopify-api dependency to 7.6.0
+- Updated dependencies [5b862fe]
+  - @shopify/shopify-app-session-storage-memory@1.0.12
+  - @shopify/shopify-app-session-storage@1.1.9
+
+## 2.2.2
+
+### Patch Changes
+
+- 346b623: Updating dependency on @shopify/shopify-api
+- Updated dependencies [346b623]
+  - @shopify/shopify-app-session-storage-memory@1.0.11
+  - @shopify/shopify-app-session-storage@1.1.8
+
+## 2.2.1
+
+### Patch Changes
+
+- 0c46a39: Fixing CSP header for internal Shopify use
+- 13b9048: Updating @shopify/shopify-api dependency to the latest version
+- Updated dependencies [13b9048]
+  - @shopify/shopify-app-session-storage-memory@1.0.10
+  - @shopify/shopify-app-session-storage@1.1.7
+
+## 2.2.0
+
+### Minor Changes
+
+- 32296d7: Update @shopify/shopify-api dependency to 7.5.0
+
+### Patch Changes
+
+- Updated dependencies [32296d7]
+  - @shopify/shopify-app-session-storage-memory@1.0.9
+  - @shopify/shopify-app-session-storage@1.1.6
+
+## 2.1.4
+
+### Patch Changes
+
+- 93e9126: Updating @shopify/shopify-api dependency
+- Updated dependencies [93e9126]
+  - @shopify/shopify-app-session-storage-memory@1.0.8
+  - @shopify/shopify-app-session-storage@1.1.5
+
+## 2.1.3
+
+### Patch Changes
+
+- bf91be6: [Internal] Improved tracking of GraphQL calls made by the package
+- b3453ff: Bumping @shopify/shopify-api dependency to latest version
+- Updated dependencies [b3453ff]
+  - @shopify/shopify-app-session-storage-memory@1.0.7
+  - @shopify/shopify-app-session-storage@1.1.4
+
+## 2.1.2
+
+### Patch Changes
+
+- 2f10cdd: Bumps [semver](https://github.com/npm/node-semver) from 7.5.0 to 7.5.1. See `semver`'s [release notes](https://github.com/npm/node-semver/releases) for more details.
+
+## 2.1.1
+
+### Patch Changes
+
+- f8978a5: Add `X-Shopify-Api-Request-Failure-Reauthorize` and `X-Shopify-Api-Request-Failure-Reauthorize-Url` to `Access-Control-Expose-Headers` when redirecting using headers via App Bridge.
+- 553fd67: Respond with 410 to OAuth requests that are initiated by a bot, using bot detection mechanism introduced in 7.1.0 of API library.
+- f40fede: Bumps [semver](https://github.com/npm/node-semver) from 7.4.0 to 7.5.0. See semver [changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) for more details.
+- 1d007e8: Bumps [@shopify/shopify-api](https://github.com/Shopify/shopify-api-js) from 7.0.0 to 7.1.0. See `@shopify/shopify-api`'s [changelog](https://github.com/Shopify/shopify-api-js/blob/main/packages/shopify-api/CHANGELOG.md) for more details.
+- Updated dependencies [e1d4f4f]
+- Updated dependencies [1d007e8]
+  - @shopify/shopify-app-session-storage@1.1.3
+  - @shopify/shopify-app-session-storage-memory@1.0.6
+
+## 2.1.0
+
+### Minor Changes
+
+- bdfd30b: Add redirectOutOfApp function to shopifyApp object, which allows apps to redirect out of the app (e.g. for OAuth or billing) regardless of how the request was set up
+
+## 2.0.0
+
+### Major Changes
+
+- 814a9c1: Bump @shopify/shopify-api from 6.2.0 to 7.0.0. See [changelog](https://github.com/Shopify/shopify-api-js/blob/main/packages/shopify-api/CHANGELOG.md) for details.
+
+  ⚠️ [Breaking] Refer to the [6 to 7 migration guide](https://github.com/Shopify/shopify-api-js/blob/main/packages/shopify-api/docs/migrating-to-v7.md) for more details on how the `.api` property returned by `shopifyApp` may be impacted by this release of the API library.
+
+  ⚠️ [Breaking] If your app is using the logging methods of the `.config.logger` property returned by `shopifyApp`, it is no longer `async`.
+
+### Patch Changes
+
+- 49cdf3f: Bump semver from 7.3.8 to 7.4.0. See [changelog](https://github.com/npm/node-semver/blob/main/CHANGELOG.md) for details.
+- Updated dependencies [e4f3415]
+  - @shopify/shopify-app-session-storage-memory@1.0.5
+  - @shopify/shopify-app-session-storage@1.1.2
+
+## 1.2.2
+
+### Patch Changes
+
+- Updated dependencies [97346b3]
+  - @shopify/shopify-app-session-storage@1.1.1
+  - @shopify/shopify-app-session-storage-memory@1.0.4
+
+## 1.2.1
+
+### Patch Changes
+
+- 719f289: Attempt to set shop from token, if present and if no shop param provided or no session found in database. Fixes #94
+- e0fddde: ensureInstalledOnShop - catch error if host param is missing, return 400. Fixes #81
+
+## 1.2.0
+
+### Minor Changes
+
+- becc305: Migrations capabilities that can handle persistence changes for all session storage implementations
+
+### Patch Changes
+
+- b20b498: Bump supertest to 6.3.3
+- 8a4be18: Bump to Mongodb 5.0.0
+- b699a5b: Bump mongodb to 4.13.0
+- b6501b0: Bump typescript to 4.9.5
+- 348b5af: Bump @ypes/pg to 8.6.6
+- cf34f7d: Bump @types/express to 4.17.16
+- Updated dependencies [b6501b0]
+- Updated dependencies [becc305]
+  - @shopify/shopify-app-session-storage-memory@1.0.3
+  - @shopify/shopify-app-session-storage@1.1.0
+
+## 1.1.0
+
+### Minor Changes
+
+- 222b755: Updating @shopify/shopify-api to v6.1.0
+
+### Patch Changes
+
+- Updated dependencies [222b755]
+  - @shopify/shopify-app-session-storage@1.0.2
+  - @shopify/shopify-app-session-storage-memory@1.0.2
+
+## 1.0.2
+
+### Patch Changes
+
+- 1eccbd6: Gracefully handle session errors in validateAuthenticatedSession
+- 1eccbd6: Check if session is valid before embedding into the Shopify Admin
+- 866b50c: Update dependencies on shopify-api v6.0.2
+- Updated dependencies [866b50c]
+  - @shopify/shopify-app-session-storage@1.0.1
+  - @shopify/shopify-app-session-storage-memory@1.0.1
+
+## 1.0.1
+
+### Patch Changes
+
+- d72952e: Allow both online and offline tokens with a single package instance
+
+## 1.0.0
+
+### Major Changes
+
+- Initial public release of @shopify/shopify-app-express

package/packages/shopify-app-express/LICENSE.md

@@ -0,0 +1,9 @@
+MIT License
+
+Copyright (c) 2022-present, Shopify Inc.
+
+Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.