koa-shopify-graphql-proxy-cookieless

This is a fork of the Shopify quilt package https://github.com/Shopify/quilt/blob/master/packages/koa-shopify-graphql-proxy/README.md

This is not sponsored or endorsed by Shopify, or connected with Shopify in any way.

I'm providing this package as a reference for using with Shopify's Next Gen JWT-based Cookieless Auth.

Important

This is a near drop-in replacement for the official koa-shopify-graphql-proxy package, but make sure you don't
import graphQLProxy as default, and use named imports instead:

``
import { graphQLProxy, ApiVersion } from "koa-shopify-graphql-proxy-cookieless";

`

Example


Here's the basic example:
`
router.post("/graphql", async (ctx, next) => {
const bearer = ctx.request.header.authorization;
const secret = process.env.SHOPIFY_API_SECRET;
const valid = isVerified(bearer, secret);
if (valid) {
const token = bearer.split(" ")[1];
const decoded = jwt.decode(token);
const shop = new URL(decoded.dest).host;
const proxy = graphQLProxy({
shop: shop,
// You will need to persist your token
// somewhere like using AWS AppSync
password: accessToken
version: ApiVersion.July20,
});
await proxy(ctx, next);
}
});
`

NOTE:

You will need to use some kind of JWT verifcation mechanism along with AppBridge
for this to work. The above example uses both of these packages:

https://www.npmjs.com/package/jsonwebtoken

https://www.npmjs.com/package/shopify-jwt-auth-verify

Please See This Tutorial On AppBridge

https://shopify.dev/tutorials/authenticate-your-app-using-session-tokens

See Working Demo

I've created a working demo based on the Shopify-CLI Node project.

If you'd like to see this in action, create a new Shopif-CLI project,
and also clone the demo repo. Once you've cloned the demo, you can connect
an existing Shopify project to the demo. Open a terminal in the
demo directory and use the command:
`shopify connect``