Skip to content

CHANGELOG.md

Latest commit

 

History

History
302 lines (187 loc) · 14.7 KB

CHANGELOG.md

File metadata and controls

302 lines (187 loc) · 14.7 KB

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and adheres to Semantic Versioning.

Unreleased

[6.2.0] - 2023-02-15

  • [Minor] Validate HMAC timestamp during OAuth #671
  • [Patch] Improve logger call on different API versions #664
  • [Patch] Prevent leakage of session object with REST resources #690
  • [Patch] Improve typing of PREV_PAGE_INFO and NEXT_PAGE_INFO for REST resources #701
  • [Minor] Change isPrivateApp configuration item to isCustomStoreApp, keep isPrivateApp but with a deprecation notice, add shopify.session.customAppSession method to create a session suitable for use with clients, REST resources in a store-specific custom app #710

[6.1.0] - 2023-01-05

  • [Minor] Allow api version overrides #660
  • [Minor] Add support for 2023-01 API version #659
  • [Patch] Force / path on session cookie #658
  • [Patch] Don't ignore previous headers when beginning OAuth #652
  • [Patch] Export missing client types from package #648
  • [Patch] Add an info-level log of API library version and runtime environment string during initialization, to aid in troubleshooting 650
  • [Patch] Add new tracking SDK headers to Storefront API client #649

[6.0.2] - 2022-12-08

  • [Patch] Raise an InvalidSession if Session.fromPropertyArray receive an object that is not an array
  • [Patch] Validate content of host parameter using sanitizeShop regex #634
  • [Patch] Use the GraphQL format of webhook topics in the error message #626
  • [Patch] Export deprecation notices for v5 main interface #639
  • [Patch] Fixed an issue when parsing the response body in the AssignedFulfillmentOrder REST resource #644

[6.0.1] - 2022-12-08

  • [Patch] Auto-detect session type in auth callback, deprecate isOnline argument #628
  • [Patch] Removed callback URL path check from webhook processing #629
  • [Patch] Pass api version to webhook handlers #630

[6.0.0] - 2022-12-06

  • ⚠️ [Breaking] Major overhaul of Shopify/shopify-api-node, which is a complete breaking change across all surfaces of the library. See the migration guide for instructions on how to update your app.

[5.3.0] - 2022-12-05

  • [Minor] Pass webhook id to handlers #606

[5.2.0] - 2022-10-04

  • Added support for the 2022-10 API version #535

[5.1.0] - 2022-09-19

  • Increased tolerance for expired JWT session tokens from 5s to 10s #462
  • Add support for billing to the library #449
  • Allow dynamically typing the body of REST and GraphQL request responses, so callers don't need to cast it #447
  • Rather than create a temporary session in order to store a session id in a cookie for the OAuth transaction, we can store the state in the cookie instead, that can then be compared against the state provided by Shopify in the callback. #438

[5.0.1] - 2022-08-03

  • Make sanitizeHost validation more flexible #446

[5.0.0] - 2022-07-28

  • ⚠️ [Breaking] If a response from a GraphQL query contains an errors attribute, GraphqlClient will now throw a GraphqlQueryError. The caller can check the error.response attribute to see what was returned from the GraphQL API. #431
  • ⚠️ [Breaking] Add utils functions to sanitize shops and hosts, and remove the validateShop utils function #434
  • Allow passing in options for the Redis client used by the session storage strategy #430
  • Fix User-Agent header sent in PUT / POST requests #435

[4.2.0] - 2022-07-20

  • Return a 401 instead of 403 when webhooks fail validation #425
  • Add optional new methods deleteSession and findSessionsByShop to SessionStorage, with the corresponding implementations for the various session storage adapters #418
  • Include subset of query body in API deprecation logs #426

[4.1.0] - 2022-07-14

  • Add new method to construct the host app URL #419

[4.0.0] - 2022-07-04

  • ⚠️ [Breaking] Add REST resources for July 2022 API version, add LATEST_API_VERSION constant, remove support and REST resources for July 2021 (2021-07) API version #415
  • Add support for July 2022 API version #409

Fixes

  • Fix a bug where the PostgreSQL session storage always attempted to create the sessions table #413

[3.1.3] - 2022-06-08

Fixes

  • Return instances of Session from session storages, not POJOs.

[3.1.2] - 2022-06-07

Added

  • Store user id and expiration date of online tokens

Fixes

  • Properly parse a non-json HTTP response #257
  • Don’t create a SQLite DB file if the SQLite storage is not used.

[3.1.0] - 2022-05-16

Added

  • Support for specifying the URI scheme of the host #385
  • Add optional saving parameter to serialize of Base class - default is false and will include read-only attributes in returned object; true used for save when committing via API to Shopify.

Fixed

  • Fixes #363
    • Webhooks register now checks for any attempt to register a GDPR topic (not done via API but by Partner Dashboard), provides an error message in response
    • For topics that don't exist, register checks the response from the initial API call for an errors field and returns accordingly

[3.0.1] - 2022-04-11

Added

  • Allow REST resources to configure a deny list of attributes to be excluded when saving #355

[3.0.0] - 2022-04-04

Added

  • ⚠️ [Breaking] Removing API version 2021-04 #343
  • ⚠️ [Breaking] The HttpResponseError error and its flavours (all returned from HTTP requests) have been slightly altered:
    • They now take in a hash of values, and will always include the response code, body (as a string if the response is not JSON), and headers
    • All response fields are now contained within a response object, to make it easier to access them
  • ⚠️ [Breaking] Update supported Admin API versions #310
  • Allow full paths in REST requests #301

Fixed

  • ⚠️ [Breaking] Stop responding to the request in the GraphQL Proxy function, returning Shopify's response instead #312

    The examples below are in express; you will now need to handle the response yourself.

    Before:

    app.post('/graphql', async (req, res) => {
  await Shopify.Utils.graphqlProxy(req, res);
});

    After:

    app.post('/graphql', async (req, res) => {
  const response = await Shopify.Utils.graphqlProxy(req, res);
  res.status(200).send(response.body);
});

[2.1.0] - 2022-02-03

Added

  • Add support for January 2022 API version #285

[2.0.0] - 2021-10-28

Added

  • Add a 5 second clockTolerance to fix jwt not active error #227
  • ⚠️ [Breaking] Change default for OAuth.beginAuth to online sessions #203
  • ⚠️ [Breaking] Return and delete session in validateAuthCallback #217
  • ⚠️ [Breaking] Extract addHandler and getHandler methods for webhooks out of register #205
  • ⚠️ [Breaking] Sessions no longer default to false for isOnline #169
  • Required Session arguments must be passed to the constructor #169
  • Allow undefined in AuthScopes #169

[1.4.3] - 2021-10-22

Fixed

  • Fixed the HTTP client error messages to expand objects #252

[1.4.2] - 2021-10-20

  • Added October21 to ApiVersion #247

[1.4.1] - 2021-06-11

  • Don't include extra params when calculating local hmac #196

[1.4.0] - 2021-05-21

Added

  • Add support for registering Google Pub/Sub webhooks #181
  • Added July21 to ApiVersion #181

[1.3.0] - 2021-05-12

Added

  • Added Storefront API client under Shopify.Clients.Storefront
  • Add isActive() method to Session class to check if session is active, replace Session with SessionInterface when used as a type #153

[1.2.1] - 2021-03-26

Added

  • Added April21 to ApiVersion #149

[1.2.0] - 2021-03-16

Added

  • Allow plain objects to be returned from the loadCallback on CustomSessionStorage #126
  • Documentation and example code for CustomSessionStorage #129

Fixed

  • Throw a different error for a missing cookie upon OAuth return #131
  • Improved documentation for GraphQL and Rest Clients. #123
  • Made Docs directory more browseable in GitHub. #136
  • Make sure CustomSessionStorage converts the expires field from a string to Date. #132
  • Made limit optional for get-requests with query #135

[1.1.0] - 2021-03-02

  • Minor text/doc changes
  • Added 2021-01 API version to enum. #117
  • Allow retrieving offline sessions using loadCurrentSession. #119

[1.0.0]

  • Initial public release

[0.5.0]

Added

  • Added AuthScopes value object to allow apps to easily check whether scopes have been updated. #110

Fixed

  • GraphQL Proxy attempts to parse the request body as JSON before passing it to the client. #106

[0.4.0] - 2021-02-10

Added

  • Webhooks types are now exported outside the library #91
  • Added support for private apps #99
  • USER_AGENT_PREFIX added to Context, to add agent to all requests #101
  • Add link to tutorial on how to rotate credentials if neccesary #107

Fixed

  • Export withSession utility method #96
  • GraphQL Client appropriately handles queries with variables #97
  • Use cryptographically random bytes to generate nonce #98
  • Stop using SameSite=none cookies for OAuth, using lax instead #100

[0.3.1] - 2021-02-03

Fixed

  • Fixed an issue when deleting the current session for embedded apps #88

[0.3.0] - 2021-01-27

Added

  • Add withSession utility method #83

Fixed

  • Refactor library public interface #87
  • Check if a webhook is registered before calling Shopify #82

[0.2.2] - 2021-01-14

Fixed

  • Ensure that the OAuth session expiration matches the cookie expiration #72 / #73

[0.2.0] - 2021-01-13

  • Preserve the OAuth cookie session for a few seconds so SPA can perform their initial load using it #70
  • Session fetches now return undefined when a session is not available #64
  • Add deleteCurrentSession utils method #60

[0.1.0] - 2020-12-17

  • Beta release

[0.0.1] - 2020-12-17

  • Test releasing scripts
  • Start of Changelog