Unhandled rejection RangeError [ERR_HTTP_INVALID_STATUS_CODE]: Invalid status code: undefined
at ServerResponse.writeHead (_http_server.js:209:11)
at ServerResponse._implicitHeader (_http_server.js:200:8)
at ServerResponse.end (_http_outgoing.js:705:10)
at ServerResponse.send (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\express\lib\response.js:221:10)
at request.post.then.catch (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\index.js:109:32)
at tryCatcher (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\util.js:16:23)
at Promise._settlePromiseFromHandler (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\promise.js:517:31)
at Promise._settlePromise (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\promise.js:574:18)
at Promise._settlePromise0 (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\promise.js:619:10)
at Promise._settlePromises (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\promise.js:695:18)
at _drainQueueStep (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\async.js:138:12)
at _drainQueue (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\async.js:131:9)
at Async._drainQueues (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\async.js:147:5)
at Immediate.Async.drainQueues [as _onImmediate] (C:\Users\Scott's PC\Desktop\Tapn\tapn-app-installer\node_modules\bluebird\js\release\async.js:17:14)
at runCallback (timers.js:705:18)
at tryOnImmediate (timers.js:676:5)
at processImmediate (timers.js:658:5)
const dotenv = require('dotenv').config();
const express = require('express');
const app = express();
const crypto = require('crypto');
const cookie = require('cookie');
const nonce = require('nonce')();
const querystring = require('querystring');
const request = require('request-promise');
const apiKey = process.env.SHOPIFY_API_KEY;
const apiSecret = process.env.SHOPIFY_API_SECRET;
const scopes = 'read_orders';
// Redirects user to app authorisation prompt
app.get('/tapn/install', (req, res) => {
const shop = req.query.shop;
if (shop) {
const state = nonce();
const redirectUri = forwardingAddress + '/tapn/auth';
const installUrl = 'https://' + shop +
'/admin/oauth/authorize?client_id=' + apiKey +
'&scope=' + scopes +
'&state=' + state +
'&redirect_uri=' + redirectUri;
res.cookie('state', state);
res.redirect(installUrl);
} else {
return res.status(400).send('Missing shop parameter. Please add ?shop=your-development-shop.myshopify.com to your request');
}
});
// After a user has acepted
app.get('/tapn/auth', (req, res) => {
const { shop, hmac, code, state } = req.query;
const stateCookie = cookie.parse(req.headers.cookie).state;
if (state !== stateCookie) {
return res.status(403).send('Request origin cannot be verified');
}
if (shop && hmac && code) {
// Validate request is from Shopfiy
const map = Object.assign({}, req.query);
delete map['signature'];
delete map['hmac'];
const message = querystring.stringify(map);
const providedHmac = Buffer.from(hmac, 'utf-8');
const generatedHash = Buffer.from(
crypto
.createHmac('sha256', apiSecret)
.update(message)
.digest('hex'),
'utf-8'
);
let hashEquals = false;
// timingSafeEqual will prevent any timing attacks. Arguments must be buffers
try {
hashEquals = crypto.timingSafeEqual(generatedHash, providedHmac)
// timingSafeEqual will return an error if the input buffers are not the same length.
} catch (e) {
hashEquals = false;
};
if (!hashEquals) {
return res.status(400).send('HMAC validation failed');
}
// Exchanging permenant access token
const accessTokenRequestUrl = 'https://' + shop + '/admin/oauth/access_token';
const accessTokenPayload = {
client_id: apiKey,
client_secret: apiSecret,
code,
};
request.post(accessTokenRequestUrl, { json: accessTokenPayload })
.then((accessTokenResponse) => {
const accessToken = accessTokenResponse.access_token;
//Creating Webhook
const shopRequestUrl = 'https://' + shop + '/admin/api/2019-07/webhooks.json';
const shopRequestHeaders = {
'X-Shopify-Access-Token': accessToken,
};
const shopRequestBody = {
"webhook": {
"topic": "orders/create",
"format": "json"
}
};
request.post(shopRequestUrl, { headers: shopRequestHeaders }, { json: shopRequestBody })
.then((shopResponse) => {
res.status(200).end(shopResponse);
})
.catch((error) => {
res.status(error.statusCode).send(error.error.error_description);
});
})
.catch((error) => {
res.status(error.statusCode).send(error.error.error_description);
});
} else {
res.status(400).send('Required parameters missing');
}
});
// App lisetning on port 3000
app.listen(3000, () => {
console.log('Example app listening on port 3000!');
});
