security hardening

This commit is contained in:
Gerhard Scheikl
2026-05-31 09:35:31 +02:00
parent d7d437a871
commit 01b4734477
31 changed files with 1234 additions and 238 deletions
+6 -5
View File
@@ -4,17 +4,18 @@ import {
AppDistribution,
shopifyApp,
} from "@shopify/shopify-app-react-router/server";
import { PrismaSessionStorage } from "@shopify/shopify-app-session-storage-prisma";
import prisma from "./db.server";
import { requireEnv } from "./services/config/env.server";
import { EncryptedPrismaSessionStorage } from "./services/session/encryptedSessionStorage.server";
const shopify = shopifyApp({
apiKey: process.env.SHOPIFY_API_KEY,
apiSecretKey: process.env.SHOPIFY_API_SECRET || "",
apiKey: requireEnv("SHOPIFY_API_KEY"),
apiSecretKey: requireEnv("SHOPIFY_API_SECRET"),
apiVersion: ApiVersion.October25,
scopes: process.env.SCOPES?.split(","),
appUrl: process.env.SHOPIFY_APP_URL || "",
appUrl: requireEnv("SHOPIFY_APP_URL"),
authPathPrefix: "/auth",
sessionStorage: new PrismaSessionStorage(prisma),
sessionStorage: new EncryptedPrismaSessionStorage(prisma),
distribution: AppDistribution.SingleMerchant,
future: {
expiringOfflineAccessTokens: true,