Contents

# frozen_string_literal: true

module ShopifyApp
  module WebhookVerification
    extend ActiveSupport::Concern
    include ShopifyApp::PayloadVerification

    included do
      skip_before_action :verify_authenticity_token, raise: false
      before_action :verify_request
    end

    private

    def verify_request
      data = request.raw_post
      return head(:unauthorized) unless hmac_valid?(data)
    end

    def shop_domain
      request.headers["HTTP_X_SHOPIFY_SHOP_DOMAIN"]
    end
  end
end

Version data entries

14 entries across 14 versions & 1 rubygems

Version	Path
shopify_app-21.2.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-21.1.1	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-21.1.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-21.0.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-20.2.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-20.1.1	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-20.1.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-20.0.2	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-20.0.1	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-20.0.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-19.1.0	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-19.0.2	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-19.0.1	lib/shopify_app/controller_concerns/webhook_verification.rb
shopify_app-19.0.0	lib/shopify_app/controller_concerns/webhook_verification.rb