Packages
shopifex
0.5.0
2.4.0
2.3.0
2.2.2
2.2.1
2.2.0
2.1.20
2.1.19
2.1.18
2.1.17
2.1.16
2.1.15
2.1.14
2.1.13
2.1.12
2.1.11
2.1.10
2.1.9
2.1.8
2.1.7
2.1.6
2.1.5
2.1.4
2.1.3
2.1.2
2.1.1
2.1.0
2.0.1
2.0.0
1.1.1
1.1.0
1.0.1
1.0.0
0.6.2
0.6.1
0.6.0
0.5.7
0.5.6
0.5.5
0.5.4
0.5.3
0.5.2
0.5.1
0.5.0
0.4.1
0.4.0
0.3.6
0.3.5
0.3.4
0.3.3
0.3.2
0.3.1
0.3.0
0.2.1
0.2.0
0.1.5
0.1.4
0.1.3
0.1.2
0.1.1
0.1.0
Phoenix boilerplate for Shopify Embedded App SDK
Current section
Files
Jump to
Current section
Files
lib/shopifex/plug/shopify_session.ex
defmodule Shopifex.Plug.ShopifySession do
import Plug.Conn
import Phoenix.Controller
require Logger
def init(options) do
# initialize options
options
end
def call(conn, _) do
token = get_token_from_conn(conn)
case Shopifex.Guardian.resource_from_token(token) do
{:ok, shop, _claims} ->
put_shop_in_session(conn, shop)
_ ->
initiate_new_session(conn)
end
end
defp get_token_from_conn(%Plug.Conn{params: %{"token" => token}}), do: token
defp get_token_from_conn(_), do: nil
defp initiate_new_session(conn = %{params: %{"hmac" => hmac}}) do
hmac = String.upcase(hmac)
query_string =
String.split(conn.query_string, "&")
|> Enum.map(fn query ->
[key, value] = String.split(query, "=")
{key, value}
end)
|> Enum.filter(fn {key, _} ->
key != "hmac"
end)
|> Enum.map(fn {key, value} ->
"#{key}=#{value}"
end)
|> Enum.join("&")
our_hmac =
:crypto.hmac(
:sha256,
Application.fetch_env!(:shopifex, :secret),
query_string
)
|> Base.encode16()
if our_hmac == hmac do
conn
|> do_new_session()
else
respond_invalid(conn)
end
end
defp initiate_new_session(conn), do: respond_invalid(conn)
defp do_new_session(conn = %{params: %{"shop" => shop_url}}) do
case Shopifex.Shops.get_shop_by_url(shop_url) do
nil -> redirect_to_install(conn, shop_url)
shop -> put_shop_in_session(conn, shop)
end
end
defp redirect_to_install(conn, shop_url) do
Logger.info("Initiating shop installation for #{shop_url}")
install_url =
"https://#{shop_url}/admin/oauth/authorize?client_id=#{
Application.fetch_env!(:shopifex, :api_key)
}&scope=#{Application.fetch_env!(:shopifex, :scopes)}&redirect_uri=#{
Application.fetch_env!(:shopifex, :redirect_uri)
}"
conn
|> redirect(external: install_url)
|> halt()
end
def put_shop_in_session(conn, shop) do
# Create a new token right away for the next request
{:ok, token, claims} = Shopifex.Guardian.encode_and_sign(shop)
conn
|> Guardian.Plug.put_current_resource(shop)
|> Guardian.Plug.put_current_claims(claims)
|> Guardian.Plug.put_current_token(token)
|> Plug.Conn.put_private(:shop_url, shop.url)
|> Plug.Conn.put_private(:shop, shop)
end
defp respond_invalid(conn) do
conn
|> put_view(ShopifexWeb.AuthView)
|> put_layout({ShopifexWeb.LayoutView, "app.html"})
|> render("select-store.html")
|> halt()
end
end