Class: ShopifyAPI::Session

Inherits:
Object
  • Object
show all
Defined in:
lib/shopify_api/session.rb

Instance Attribute Summary collapse

Class Method Summary collapse

Instance Method Summary collapse

Constructor Details

#initialize(domain:, token:, api_version:, extra: {}) ⇒ Session

Returns a new instance of Session.



87
88
89
90
91
92
 
# File 'lib/shopify_api/session.rb', line 87

def initialize(domain:, token:, api_version:, extra: {})
  self.domain = self.class.prepare_domain(domain)
  self.api_version = api_version
  self.token = token
  self.extra = extra
end

Instance Attribute Details

#api_version ⇒ Object

Returns the value of attribute api_version.



14
15
16
 
# File 'lib/shopify_api/session.rb', line 14

def api_version
  @api_version
end

#domain ⇒ Object Also known as: url

Returns the value of attribute domain.



13
14
15
 
# File 'lib/shopify_api/session.rb', line 13

def domain
  @domain
end

#extra ⇒ Object

Returns the value of attribute extra.



13
14
15
 
# File 'lib/shopify_api/session.rb', line 13

def extra
  @extra
end

#name ⇒ Object

Returns the value of attribute name.



13
14
15
 
# File 'lib/shopify_api/session.rb', line 13

def name
  @name
end

#token ⇒ Object

Returns the value of attribute token.



13
14
15
 
# File 'lib/shopify_api/session.rb', line 13

def token
  @token
end

Class Method Details

.prepare_domain(domain) ⇒ Object 



47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
 
# File 'lib/shopify_api/session.rb', line 47

def prepare_domain(domain)
  return nil if domain.blank?
  # remove http:// or https://
  domain = domain.strip.gsub(%r{\Ahttps?://}, '')
  # extract host, removing any username, password or path
  shop = URI.parse("https://#{domain}").host
  # extract subdomain of .myshopify.com
  if idx = shop.index(".")
    shop = shop.slice(0, idx)
  end
  return nil if shop.empty?
  "#{shop}.#{myshopify_domain}"
rescue URI::InvalidURIError
  nil
end

.setup(params) ⇒ Object 



19
20
21
 
# File 'lib/shopify_api/session.rb', line 19

def setup(params)
  params.each { |k,value| public_send("#{k}=", value) }
end

.temp(domain:, token:, api_version:, &block) ⇒ Object 



23
24
25
26
27
 
# File 'lib/shopify_api/session.rb', line 23

def temp(domain:, token:, api_version:, &block)
  session = new(domain: domain, token: token, api_version: api_version)

  with_session(session, &block)
end

.validate_signature(params) ⇒ Object 



63
64
65
66
67
68
69
70
 
# File 'lib/shopify_api/session.rb', line 63

def validate_signature(params)
  params = (params.respond_to?(:to_unsafe_hash) ? params.to_unsafe_hash : params).with_indifferent_access
  return false unless signature = params[:hmac]

  calculated_signature = OpenSSL::HMAC.hexdigest(OpenSSL::Digest::SHA256.new(), secret, encoded_params_for_signature(params))

  Rack::Utils.secure_compare(calculated_signature, signature)
end

.with_session(session, &_block) ⇒ Object 



29
30
31
32
33
34
35
36
37
38
 
# File 'lib/shopify_api/session.rb', line 29

def with_session(session, &_block)
  original_session = extract_current_session

  begin
    ShopifyAPI::Base.activate_session(session)
    yield
  ensure
    ShopifyAPI::Base.activate_session(original_session)
  end
end

.with_version(api_version, &block) ⇒ Object 



40
41
42
43
44
45
 
# File 'lib/shopify_api/session.rb', line 40

def with_version(api_version, &block)
  original_session = extract_current_session
  session = new(domain: original_session.site, token: original_session.token, api_version: api_version)

  with_session(session, &block)
end

Instance Method Details

#create_permission_url(scope, redirect_uri = nil) ⇒ Object 



94
95
96
97
98
 
# File 'lib/shopify_api/session.rb', line 94

def create_permission_url(scope, redirect_uri = nil)
  params = {:client_id => api_key, :scope => scope.join(',')}
  params[:redirect_uri] = redirect_uri if redirect_uri
  construct_oauth_url("authorize", params)
end

#expired? ⇒ Boolean

Returns:

  • (Boolean) 


147
148
149
150
 
# File 'lib/shopify_api/session.rb', line 147

def expired?
  return false if expires_in.nil?
  expires_in <= 0
end

#expires_at ⇒ Object 



142
143
144
145
 
# File 'lib/shopify_api/session.rb', line 142

def expires_at
  return unless extra.present?
  @expires_at ||= Time.at(extra['expires_at']).utc
end

#expires_in ⇒ Object 



137
138
139
140
 
# File 'lib/shopify_api/session.rb', line 137

def expires_in
  return unless expires_at.present?
  [0, expires_at.to_i - Time.now.utc.to_i].max
end

#request_token(params) ⇒ Object 



100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
 
# File 'lib/shopify_api/session.rb', line 100

def request_token(params)
  return token if token

  unless self.class.validate_signature(params) && params[:timestamp].to_i > 24.hours.ago.utc.to_i
    raise ShopifyAPI::ValidationException, "Invalid Signature: Possible malicious login"
  end

  response = access_token_request(params['code'])
  if response.code == "200"
    self.extra = JSON.parse(response.body)
    self.token = extra.delete('access_token')

    if expires_in = extra.delete('expires_in')
      extra['expires_at'] = Time.now.utc.to_i + expires_in
    end
    token
  else
    raise RuntimeError, response.msg
  end
end

#shop ⇒ Object 



121
122
123
 
# File 'lib/shopify_api/session.rb', line 121

def shop
  Shop.current
end

#site ⇒ Object 



125
126
127
 
# File 'lib/shopify_api/session.rb', line 125

def site
  "https://#{domain}"
end

#valid? ⇒ Boolean

Returns:

  • (Boolean) 


133
134
135
 
# File 'lib/shopify_api/session.rb', line 133

def valid?
  domain.present? && token.present? && api_version.present?
end