j"tdZddlZddlZddlZddlmZmZmZddlm Z ddl m Z ddl m Z mZmZddlmZmZmZmZddlmZdd lmZmZmZmZmZmZmZmZej@e!Z"ed d g Z#d Z$dZ%e#jMdeddeddfde'de'fdZ(de'de'fdZ)d*de'de*de fdZ+ d+de'de'de'de'ddf d Z,e#jMd!ededededededfde'd"e'd#e'd$e'd%e'd&e'f d'Z-e#jMd(edfde'fd)Z.y),zShopify OAuth endpoints. Mounted at /api/shopify to match the redirect URL registered in the Shopify Dev Dashboard (app version galaxiq-5). Changing this prefix breaks the callback. N) APIRouter HTTPExceptionQuery)RedirectResponse)settings)TenantHasNoUserError track_connectupsert_integration) KIND_SHOPIFYencrypt_credentials get_sources upsert_source)get_redis_client)SHOPIFY_API_VERSIONShopQueryErrorTokenExchangeErrorbuild_authorize_url exchange_codefetch_shop_infonormalise_shop_domain verify_hmacz /api/shopifyshopify)prefixtagszshopify:oauth:iXz/install.z.myshopify.com) descriptionz"GalaxiQ tenant to bind the shop toshop tenant_idcKt|}|s#tjd|tddt j d}t j||d}t}|4d{|jt|t|d{dddd{tjd||t|d d tt||S7t7O7A#1d{7swYQxYww) aStart the authorization code grant. TODO(auth): tenant_id arrives from the query string because this codebase has no session. That lets anyone bind a shop to any tenant. It must come from an authenticated session before a single external merchant connects. z,Rejected install for invalid shop domain: %rizInvalid shop domain) status_codedetail)rrNz+Starting Shopify install for %s (tenant %s)oauth_authorize_url_readysuccess)rloggerwarningrsecrets token_hexjsondumpsrsetex STATE_PREFIXSTATE_TTL_SECONDSinfo _safe_trackrr)rrdomainstatepayloadclients ./var/www/html/strategist-ai/app/api/shopify.pyinstallr4"s#4 (F EtL4IJJ   b !Ejj&yABG  FQQlll^E735FPPPQQ KK=vyQ 6 B /> ?? QPQQQQsZA.D0C%1D4#C+C'C+ D'C)(>D'C+)D+C=1C4 2C=9Dparamsreturnc dtjvrdnd}djd|jD}tj||S)zFRONTEND_URL with the given query params appended. Shared by the error and success paths so the "does FRONTEND_URL already have a query string" check lives in exactly one place. ?&c30K|]\}}|d|yw)=N).0kvs r3 z _frontend_url..Fs;DAqs!A3Z;s)r FRONTEND_URLjoinitems)r5sepquerys r3 _frontend_urlrF?sL ---#3C HH;FLLN; ;E## $SE% 11reasonrc0tt||S)zSend the merchant back to the UI with a readable reason. Rendering an error page instead would leave the flow untestable from the browser, which is where it actually runs. ) shopify_errorr)rrF)rHrs r3_error_redirectrLJs F+ FFrGdelivery_statusoutcome error_messagecr t|d|||y#t$rtjd|dYywxYw)zsThe audit trail must never be the reason a connection fails or a merchant-facing error redirect doesn't happen.rzConnect tracking failed for %sT)exc_infoN)r Exceptionr$r%)rrMrNrOs r3r.r.Xs<SiOWmT S7TRSs !66z /callbackcoder0hmac timestamphostc Kt|}|s!tjd|tdSt }|4d{|r!|j t |d{nd}|r!|jt |d{dddd{s!tjd|tdStj|} | j d|k7rNtjd| j d|t| j ddd d td S||||||d jD cic] \} } | | |  } } } t| s2tjd |t| ddd d td S t||d{} t|| dd{}t#| dt$|||d| dt&|d|ddd| di t)| dddt+d| di||d| dt&|d|ddtj1d|| dt| ddd t3t5d|!d"#S7;777#1d{7swYxYwcc} } w7#t$rt| ddd dtdcYSwxYw7#t $rt| ddd dtdcYSwxYw#t,$r9tj/d| dt| ddd dtddcYSwxYww)$Nz%Callback with invalid shop domain: %r invalid_shopz-Callback with unknown or expired state for %s invalid_staterz5Callback shop mismatch: state had %s, callback had %sr not_connectedfailed shop_mismatch)rrSr0rTrUrVz(Callback HMAC verification failed for %s hmac_failedtoken_exchange_failed access_tokentoken_verification_failednamescope currency_codeprimary_domain) shop_domain shop_namescopes api_versionrcrd)rkind external_refconfig credentialsroauth2)rprovider auth_typeaccess_token_ciphertextmetadataz7Tenant %s has no owning user; cannot record integrationztenant has no owning userno_owning_useriz'Connected Shopify store %s to tenant %s connectedr#)rsri3rK)rr$r%rLrgetr+deleter(loadsr.rCrrrrrrr rr r rerrorr-rrF)rrSr0rTrUrVr/r2rawstoredr>r?r5 token_datar-s r3callbackr{bs#4 (F >E~..  F:: &!&\$W-2!%o!6"&'7"8   2 KK96{#%{#[)<  7S JJ}:8 9::::" 7 8F;'(+ -6778I <F;'(/ 1:;;MMMz/statusc$Kdt|iSw)zConnected sources for a tenant. Never returns credentials. Returns a list because a tenant may hold several sources once the HTTP API connector lands. sources)r )rs r3statusr~s {9- ..s)i/)N)/__doc__r(loggingr&fastapirrrfastapi.responsesrapp.core.configr"app.services.integrations.platformrr r app.services.catalog.sourcesr r r rapp.services.infra.redisr'app.services.integrations.shopify_oauthrrrrrrrr getLogger__name__r$routerr+r,rtstrr4rFintrLr.r{r~r<rGr3rs  33.$6   8 $ . { ; Jc'?@3,PQ@ @@@82C2C2 FC Fc F