feature/cookieless

.gitignore

@@ -1,3 +1,5 @@
+/bin
+/build
 /vendor
 composer.lock
 .phpunit.result.cache

phpstan.neon

@@ -7,5 +7,7 @@ parameters:
 		- '#Access to an undefined property Osiset\\ShopifyApp\\Storage\\Models\\.*::\$.*\.#'
 		- '#Access to an undefined property Osiset\\ShopifyApp\\Test\\Stubs\\.*::\$.*\.#'
 		- '#Variable \$factory might not be defined\.#'
+		- '#Call to an undefined static method Illuminate\\Routing\\Redirector::tokenRedirect\(\).#'
+		- '#Call to an undefined static method Illuminate\\Routing\\UrlGenerator::tokenRoute\(\).#'
 	parallel:
 		maximumNumberOfProcesses: 2

phpunit.xml.dist

@@ -23,7 +23,6 @@
             <directory>src/ShopifyApp/Contracts/</directory>
             <directory>src/ShopifyApp/Exceptions/</directory>
             <directory>src/ShopifyApp/Objects/Enums/</directory>
-            <directory>src/ShopifyApp/Objects/Values/</directory>
             <directory>src/ShopifyApp/resources/</directory>
             <file>src/ShopifyApp/Messaging/Events/AppLoggedIn.php</file>
             <file>src/ShopifyApp/ShopifyAppProvider.php</file>

src/ShopifyApp/Actions/AfterAuthorize.php

@@ -2,6 +2,7 @@
 
 namespace Osiset\ShopifyApp\Actions;
 
+use Illuminate\Support\Arr;
 use Osiset\ShopifyApp\Contracts\Objects\Values\ShopId as ShopIdValue;
 use Osiset\ShopifyApp\Contracts\Queries\Shop as IShopQuery;
 use Osiset\ShopifyApp\Contracts\ShopModel as IShopModel;
@@ -50,8 +51,8 @@ public function __invoke(ShopIdValue $shopId): bool
          * @return bool
          */
         $fireJob = function (array $config, IShopModel $shop): bool {
-            $job = $config['job'];
-            if (isset($config['inline']) && $config['inline'] === true) {
+            $job = Arr::get($config, 'job');
+            if (Arr::get($config, 'inline', false)) {
                 // Run this job immediately
                 $job::dispatchNow($shop);
             } else {
@@ -68,18 +69,15 @@ public function __invoke(ShopIdValue $shopId): bool
 
         // Grab the jobs config
         $jobsConfig = Util::getShopifyConfig('after_authenticate_job');
-
-        if (isset($jobsConfig[0])) {
+        if (Arr::has($jobsConfig, 0)) {
             // We have multi-jobs
             foreach ($jobsConfig as $jobConfig) {
                 // We have a job, pass the shop object to the contructor
                 $fireJob($jobConfig, $shop);
             }
 
             return true;
-        }
-
-        if (isset($jobsConfig['job'])) {
+        } elseif (Arr::has($jobsConfig, 'job')) {
             // We have a single job
             return $fireJob($jobsConfig, $shop);
         }

src/ShopifyApp/Actions/AuthenticateShop.php

@@ -5,20 +5,12 @@
 use Illuminate\Http\Request;
 use Osiset\ShopifyApp\Contracts\ApiHelper as IApiHelper;
 use Osiset\ShopifyApp\Objects\Values\ShopDomain;
-use Osiset\ShopifyApp\Services\ShopSession;
 
 /**
  * Authenticates a shop and fires post authentication actions.
  */
 class AuthenticateShop
 {
-    /**
-     * The shop session handler.
-     *
-     * @var ShopSession
-     */
-    protected $shopSession;
-
     /**
      * The API helper.
      *
@@ -27,11 +19,11 @@ class AuthenticateShop
     protected $apiHelper;
 
     /**
-     * The action for authorizing a shop.
+     * The action for installing a shop.
      *
-     * @var AuthorizeShop
+     * @var InstallShop
      */
-    protected $authorizeShopAction;
+    protected $installShopAction;
 
     /**
      * The action for dispatching scripts.
@@ -57,26 +49,23 @@ class AuthenticateShop
     /**
      * Setup.
      *
-     * @param ShopSession      $shopSession            The shop session handler.
      * @param IApiHelper       $apiHelper              The API helper.
-     * @param AuthorizeShop    $authorizeShopAction    The action for authorizing a shop.
+     * @param InstallShop      $installShopAction      The action for installing a shop.
      * @param DispatchScripts  $dispatchScriptsAction  The action for dispatching scripts.
      * @param DispatchWebhooks $dispatchWebhooksAction The action for dispatching webhooks.
      * @param AfterAuthorize   $afterAuthorizeAction   The action for after authorize actions.
      *
      * @return void
      */
     public function __construct(
-        ShopSession $shopSession,
         IApiHelper $apiHelper,
-        AuthorizeShop $authorizeShopAction,
+        InstallShop $installShopAction,
         DispatchScripts $dispatchScriptsAction,
         DispatchWebhooks $dispatchWebhooksAction,
         AfterAuthorize $afterAuthorizeAction
     ) {
-        $this->shopSession = $shopSession;
         $this->apiHelper = $apiHelper;
-        $this->authorizeShopAction = $authorizeShopAction;
+        $this->installShopAction = $installShopAction;
         $this->dispatchScriptsAction = $dispatchScriptsAction;
         $this->dispatchWebhooksAction = $dispatchWebhooksAction;
         $this->afterAuthorizeAction = $afterAuthorizeAction;
@@ -91,13 +80,15 @@ public function __construct(
      */
     public function __invoke(Request $request): array
     {
-        // Setup
-        $shopDomain = ShopDomain::fromNative($request->get('shop'));
-        $code = $request->get('code');
-
         // Run the check
-        $result = call_user_func($this->authorizeShopAction, $shopDomain, $code);
-        if (! $result->completed) {
+        /** @var $result array */
+        $result = call_user_func(
+            $this->installShopAction,
+            ShopDomain::fromNative($request->get('shop')),
+            $request->query('code')
+        );
+
+        if (! $result['completed']) {
             // No code, redirect to auth URL
             return [$result, false];
         }
@@ -110,10 +101,9 @@ public function __invoke(Request $request): array
         }
 
         // Fire the post processing jobs
-        $shopId = $this->shopSession->getShop()->getId();
-        call_user_func($this->dispatchScriptsAction, $shopId, false);
-        call_user_func($this->dispatchWebhooksAction, $shopId, false);
-        call_user_func($this->afterAuthorizeAction, $shopId);
+        call_user_func($this->dispatchScriptsAction, $result['shop_id'], false);
+        call_user_func($this->dispatchWebhooksAction, $result['shop_id'], false);
+        call_user_func($this->afterAuthorizeAction, $result['shop_id']);
 
         return [$result, true];
     }

src/ShopifyApp/Actions/AuthorizeShop.php → src/ShopifyApp/Actions/InstallShop.php

@@ -6,16 +6,15 @@
 use Osiset\ShopifyApp\Contracts\Commands\Shop as IShopCommand;
 use Osiset\ShopifyApp\Contracts\Queries\Shop as IShopQuery;
 use Osiset\ShopifyApp\Objects\Enums\AuthMode;
+use Osiset\ShopifyApp\Objects\Values\AccessToken;
 use Osiset\ShopifyApp\Objects\Values\NullAccessToken;
 use Osiset\ShopifyApp\Objects\Values\ShopDomain;
-use Osiset\ShopifyApp\Services\ShopSession;
 use Osiset\ShopifyApp\Util;
-use stdClass;
 
 /**
- * Authenticates a shop via HTTP request.
+ * Install steps for a shop.
  */
-class AuthorizeShop
+class InstallShop
 {
     /**
      * Querier for shops.
@@ -31,41 +30,30 @@ class AuthorizeShop
      */
     protected $shopCommand;
 
-    /**
-     * The shop session handler.
-     *
-     * @var ShopSession
-     */
-    protected $shopSession;
-
     /**
      * Setup.
      *
      * @param IShopQuery  $shopQuery   The querier for the shop.
-     * @param ShopSession $shopSession The shop session handler.
      *
      * @return void
      */
     public function __construct(
         IShopQuery $shopQuery,
-        IShopCommand $shopCommand,
-        ShopSession $shopSession
+        IShopCommand $shopCommand
     ) {
         $this->shopQuery = $shopQuery;
         $this->shopCommand = $shopCommand;
-        $this->shopSession = $shopSession;
     }
 
     /**
      * Execution.
-     * TODO: Rethrow an API exception.
      *
      * @param ShopDomain  $shopDomain The shop ID.
      * @param string|null $code       The code from Shopify.
      *
-     * @return stdClass
+     * @return array
      */
-    public function __invoke(ShopDomain $shopDomain, ?string $code): stdClass
+    public function __invoke(ShopDomain $shopDomain, ?string $code): array
     {
         // Get the shop
         $shop = $this->shopQuery->getByDomain($shopDomain, [], true);
@@ -75,42 +63,43 @@ public function __invoke(ShopDomain $shopDomain, ?string $code): stdClass
             $shop = $this->shopQuery->getByDomain($shopDomain);
         }
 
-        // Return data
-        $return = [
-            'completed' => false,
-            'url'       => null,
-        ];
-
-        $apiHelper = $shop->apiHelper();
-
         // Access/grant mode
+        $apiHelper = $shop->apiHelper();
         $grantMode = $shop->hasOfflineAccess() ?
             AuthMode::fromNative(Util::getShopifyConfig('api_grant_mode', $shop)) :
             AuthMode::OFFLINE();
 
-        $return['url'] = $apiHelper->buildAuthUrl($grantMode, Util::getShopifyConfig('api_scopes', $shop));
-
         // If there's no code
         if (empty($code)) {
-            return (object) $return;
-        }
-
-        // if the store has been deleted, restore the store to set the access token
-        if ($shop->trashed()) {
-            $shop->restore();
+            return [
+                'completed' => false,
+                'url'       => $apiHelper->buildAuthUrl($grantMode, Util::getShopifyConfig('api_scopes', $shop)),
+                'shop_id'   => $shop->getId(),
+            ];
         }
 
-        // We have a good code, get the access details
-        $this->shopSession->make($shop->getDomain());
-
         try {
-            $this->shopSession->setAccess($apiHelper->getAccessData($code));
-            $return['url'] = null;
-            $return['completed'] = true;
+            // if the store has been deleted, restore the store to set the access token
+            if ($shop->trashed()) {
+                $shop->restore();
+            }
+
+            // Get the data and set the access token
+            $data = $apiHelper->getAccessData($code);
+            $this->shopCommand->setAccessToken($shop->getId(), AccessToken::fromNative($data['access_token']));
+
+            return [
+                'completed' => true,
+                'url'       => null,
+                'shop_id'   => $shop->getId(),
+            ];
         } catch (Exception $e) {
             // Just return the default setting
+            return [
+                'completed' => false,
+                'url'       => null,
+                'shop_id'   => null,
+            ];
         }
-
-        return (object) $return;
     }
 }

src/ShopifyApp/Contracts/Objects/Values/SessionId.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace Osiset\ShopifyApp\Contracts\Objects\Values;
+
+use Funeralzone\ValueObjects\ValueObject;
+
+/**
+ * Session ID from session token.
+ */
+interface SessionId extends ValueObject
+{
+}

src/ShopifyApp/Contracts/Objects/Values/SessionToken.php

@@ -0,0 +1,12 @@
+<?php
+
+namespace Osiset\ShopifyApp\Contracts\Objects\Values;
+
+use Funeralzone\ValueObjects\ValueObject;
+
+/**
+ * Session token.
+ */
+interface SessionToken extends ValueObject
+{
+}

src/ShopifyApp/Contracts/ShopModel.php

@@ -10,6 +10,7 @@
 use Osiset\ShopifyApp\Contracts\Objects\Values\AccessToken as AccessTokenValue;
 use Osiset\ShopifyApp\Contracts\Objects\Values\ShopDomain as ShopDomainValue;
 use Osiset\ShopifyApp\Contracts\Objects\Values\ShopId as ShopIdValue;
+use Osiset\ShopifyApp\Objects\Values\SessionContext;
 
 /**
  * Reprecents the shop model.
@@ -35,7 +36,7 @@ public function getDomain(): ShopDomainValue;
      *
      * @return AccessTokenValue
      */
-    public function getToken(): AccessTokenValue;
+    public function getAccessToken(): AccessTokenValue;
 
     /**
      * Gets charges belonging to the shop.
@@ -86,4 +87,20 @@ public function apiHelper(): IApiHelper;
      * @return BasicShopifyAPI
      */
     public function api(): BasicShopifyAPI;
+
+    /**
+     * Set the session context for the user.
+     *
+     * @param SessionContext $session The session context service.
+     *
+     * @return void
+     */
+    public function setSessionContext(SessionContext $session): void;
+
+    /**
+     * Get the session context for the user.
+     *
+     * @return SessionContext|null
+     */
+    public function getSessionContext(): ?SessionContext;
 }

src/ShopifyApp/Directives/SessionToken.php

@@ -0,0 +1,19 @@
+<?php
+
+namespace Osiset\ShopifyApp\Directives;
+
+/**
+ * Provides a Blade directive for session tokens.
+ */
+class SessionToken
+{
+    /**
+     * Output for the directive.
+     *
+     * @return string
+     */
+    public function __invoke(): string
+    {
+        return '<input type="hidden" class="session-token" name="token" value="" />';
+    }
+}

src/ShopifyApp/Exceptions/MissingAuthUrlException.php

@@ -0,0 +1,10 @@
+<?php
+
+namespace Osiset\ShopifyApp\Exceptions;
+
+/**
+ * Exception for handling a missing shop's myshopify domain.
+ */
+class MissingAuthUrlException extends BaseException
+{
+}