Merge pull request #27 from seka19/feature/custom-scopes-validation

feat: custom scopes validation

Author: seka19

src/ShopifyApp/Middleware/AuthShop.php

@@ -376,6 +376,24 @@ function (\stdClass $row): string {
             explode(',', Config::get('shopify-app.api_scopes'))
         );
 
+        $customValidator = Config::get('shopify-app.api_scopes_validator');
+        if (is_array($customValidator) && class_exists($customValidator[0])) {
+            $class = app($customValidator[0]);
+            if (method_exists($class, $customValidator[1])) {
+                $ok = call_user_func_array(
+                    [$class, $customValidator[1]],
+                    [$shop, $scopes_actual]
+                );
+                if ($ok) {
+                    return null;
+                }
+                return Redirect::route(
+                    'authenticate',
+                    ['shop' => $shop->shopify_domain]
+                );
+            }
+        }
+
         if (empty(array_diff($scopes_required, $scopes_actual))) {
             return null;
         }

src/ShopifyApp/resources/config/shopify-app.php

@@ -161,6 +161,15 @@
      */
     'api_scopes_validation' => (bool) env('SHOPIFY_API_SCOPES_VALIDATION', true),
 
+    /*
+     * Custom scopes validation
+     *
+     * Correct value: [\App\Services\Shop::class, 'checkScopes']
+     *
+     * Expected method signature: public function checkScopes(\App\Models\Shop $shop, array $scopesActual): bool
+     */
+    'api_scopes_validator' => null,
+
     /*
     |--------------------------------------------------------------------------
     | Shopify API Grant Mode