shopify authentication using token & hmac (#2)

Co-authored-by: rupam <rupam@claritytech.io>

README.md

@@ -37,6 +37,28 @@ Setup alias for the Facade
     'Shopify' => ClarityTech\Shopify\Facades\Shopify::class,
 ],
 ```
+## Set shopify app authentication
+
+Update config/app.php with below code and in routes add `auth:shopify` as middleware
+
+```php5
+
+'guards' => [
+    ...
+    'shopify' => [
+        'driver' => 'shopify-auth',
+        'provider' => 'shops',
+    ],
+],
+
+'providers' => [
+    ...
+    'shops' => [
+        'driver' => 'eloquent',
+        'model' => App\Models\Shop::class,
+    ]
+],
+```
 
 ## Set credendials
 

composer.json

@@ -21,7 +21,8 @@
     "extra": {
         "laravel": {
             "providers": [
-                "ClarityTech\\Shopify\\ShopifyServiceProvider"
+                "ClarityTech\\Shopify\\ShopifyServiceProvider",
+                "ClarityTech\\Shopify\\AuthServiceProvider"
             ],
             "aliases": {
                 "Shopify": "ClarityTech\\Shopify\\Facades\\Shopify"

src/Shopify/AuthServiceProvider.php

@@ -0,0 +1,88 @@
+<?php
+
+namespace ClarityTech\Shopify;
+
+use ClarityTech\Shopify\Facades\Shopify;
+use Illuminate\Foundation\Support\Providers\AuthServiceProvider as ServiceProvider;
+use Illuminate\Http\Request;
+use Illuminate\Support\Facades\Auth;
+use Illuminate\Support\Str;
+
+class AuthServiceProvider extends ServiceProvider
+{
+    /**
+     * The policy mappings for the application.
+     *
+     * @var array
+     */
+    protected $policies = [
+        // 'App\Models\Model' => 'App\Policies\ModelPolicy',
+    ];
+
+    /**
+     * Register any authentication / authorization services.
+     *
+     * @return void
+     */
+    public function boot()
+    {
+        $this->registerPolicies();
+
+        Auth::viaRequest('shopify-auth', function (Request $request) {
+            $shop = null;
+            $user_provider = Auth::createUserProvider('shops');
+            $class = $user_provider->getModel();
+
+            if($class){
+                $object = new $class();
+
+                if($object){
+                    if ($request->has('token')) {
+                        $token = $request->token;
+                        $key = config('shopify.secret');
+                        $tokenParts = explode(".", $token);
+                        $tokenPayload = base64_decode($tokenParts[1]);
+                        $jwtPayload = json_decode($tokenPayload);
+
+                        if ($this->verifyJwtToken($token, $key) && $jwtPayload) {
+                            $myshopify_domain = Str::replaceFirst('https://', '', $jwtPayload->dest);
+
+                            $shop = $user_provider->retrieveByCredentials([
+                                $object->username() => $myshopify_domain
+                            ]);
+                        }
+                    } elseif ($request->has('shop') && $request->has('hmac')) {
+                        if (Shopify::verifyRequest($request->all())) {
+                            $shop = $user_provider->retrieveByCredentials([
+                                $object->username() => $request->shop
+                            ]);
+                        }
+                    }
+                }
+            }
+            return $shop;
+        });
+    }
+
+    function verifyJwtToken($token, $key)
+    {
+        $tokenParts = explode(".", $token);
+        $data = $tokenParts[0] . "." . $tokenParts[1];
+        $hmc = hash_hmac('sha256', $data, $key, true);
+        $base64UrlSignature = $this->base64UrlEncode($hmc);
+        if ($base64UrlSignature == $tokenParts[2]) {
+            return true;
+        } else {
+            return false;
+        }
+    }
+
+    function base64UrlEncode($text)
+    {
+        return str_replace(
+            ['+', '/', '='],
+            ['-', '_', ''],
+            base64_encode($text)
+        );
+    }
+}

src/Shopify/Contracts/ShopifyShop.php

@@ -9,4 +9,6 @@ public function getShopifyId() : int;
     public function getShopToken() : string;
 
     public function getShopifyDomain() : string;
+
+    public function username() : string;
 }

src/Shopify/ShopifyServiceProvider.php

@@ -100,7 +100,7 @@ private function publishJobs(): void
         // Job publish
         $this->publishes(
             [
-                __DIR__.'/Jobs/AppUninstalledJob.php' => "{$this->app->path()}/Jobs/AppUninstalledJob.php",
+                __DIR__.'/Jobs/AppUninstalledJob.php' => app_path("Jobs/AppUninstalledJob.php"),
             ],
             'shopify-jobs'
         );