koa-shopify-graphql-proxy-cookieless
This is a fork of the Shopify quilt package https://github.com/Shopify/quilt/blob/master/packages/koa-shopify-graphql-proxy/README.md
This is not sponsored or endorsed by Shopify, or connected with Shopify in any way.
I'm providing this package as a reference for using with Shopify's Next Gen JWT-based Cookieless Auth.
Important
This is a near drop-in replacement for the official koa-shopify-graphql-proxy package, but make sure you don't import graphQLProxy as default, and use named imports instead:
import { graphQLProxy, ApiVersion } from "koa-shopify-graphql-proxy-cookieless";
Example
Here's the basic example:
router.post("/graphql", async (ctx, next) => {
const bearer = ctx.request.header.authorization;
const secret = process.env.SHOPIFY_API_SECRET;
const valid = isVerified(bearer, secret);
if (valid) {
const token = bearer.split(" ")[1];
const decoded = jwt.decode(token);
const shop = new URL(decoded.dest).host;
const proxy = graphQLProxy({
shop: shop,
// You will need to persist your token
// somewhere like using AWS AppSync
password: accessToken
version: ApiVersion.July20,
});
await proxy(ctx, next);
}
});
NOTE:
You will need to use some kind of JWT verifcation mechanism along with AppBridge for this to work. The above example uses both of these packages:
https://www.npmjs.com/package/jsonwebtoken
https://www.npmjs.com/package/shopify-jwt-auth-verify
Please See This Tutorial On AppBridge
https://shopify.dev/tutorials/authenticate-your-app-using-session-tokens
See Working Demo
I've created a working demo based on the Shopify-CLI Node project.
https://github.com/nprutan/shopify-cookieless-auth-demo
If you'd like to see this in action, create a new Shopif-CLI project,
and also clone the demo repo. Once you've cloned the demo, you can connect
an existing Shopify project to the demo. Open a terminal in the
demo directory and use the command:
shopify connect