Contents

# frozen_string_literal: true

module ShopifyApp
  module ShopAccessScopesVerification
    extend ActiveSupport::Concern
    include ShopifyApp::RedirectForEmbedded

    included do
      # Embedded auth strategy uses Shopify managed install to ensure latest access scopes,
      # This will be handled automatically through token exchange
      unless ShopifyApp.configuration.use_new_embedded_auth_strategy?
        before_action :login_on_scope_changes
      end
    end

    protected

    def login_on_scope_changes
      if scopes_mismatch?
        if embedded_param?
          redirect_for_embedded
        else
          redirect_to(shop_login)
        end
      end
    end

    private

    def scopes_mismatch?
      ShopifyApp.configuration.shop_access_scopes_strategy.update_access_scopes?(current_shopify_domain)
    end

    def current_shopify_domain
      return if params[:shop].blank?

      ShopifyApp::Utils.sanitize_shop_domain(params[:shop])
    end

    def shop_login
      ShopifyApp::Utils.shop_login_url(shop: params[:shop], host: params[:host], return_to: request.fullpath)
    end
  end
end

Version data entries

8 entries across 8 versions & 1 rubygems

Version	Path
shopify_app-22.5.1	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.5.0	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.4.0	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.3.1	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.3.0	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.2.1	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.2.0	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb
shopify_app-22.1.0	app/controllers/concerns/shopify_app/shop_access_scopes_verification.rb