
Research
npm Malware Targets Telegram Bot Developers with Persistent SSH Backdoors
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
@gadgetinc/react-shopify-app-bridge
Advanced tools
<img alt="GitHub CI status" src="https://badgen.net/github/checks/ga
This library implements the following features:
@gadgetinc/react
This is a companion package to the JavaScript client package generated for your Gadget app. You must first install the JS client for your app, and then install this package.
To install the JS client for your app, you must set up the Gadget NPM registry, and then install the client:
npm config set @gadget-client:registry https://registry.gadget.dev/npm
yarn add @gadget-client/my-app-slug
# or
npm install @gadget-client/my-app-slug
Full installation instructions can be found in the Gadget docs at https://docs.gadget.dev/api/<my-app-slug>/external-api-calls/installing
.
Once you have your JS client installed, you can install the React hooks library and the Shopify App bridge library with yarn
or npm
:
yarn add @gadgetinc/react-shopify-app-bridge @gadgetinc/react @shopify/app-bridge-react react
# or
npm install --save @gadgetinc/react-shopify-app-bridge @gadgetinc/react @shopify/app-bridge-react react
While exploring Shopify embedded app development, you may have come across documentation on how to set up Shopify App Bridge. This package will take care of all steps involving OAuth and initializing the Shopify app bridge. The OAuth steps as well as initializing the Shopify app bridge is handled by the Provider
. The initialized instance of App Bridge is accessible via the appBridge
key returned from useGadget
.
NOTE: This example is very similar to that found in @gadgetinc/react, however, this example should be followed if you're using the @gadgetinc/react-shopify-app-bridge
package.
src/api.ts
// replace `my-app-slug` with your app slug from your Gadget app's domain
import { Client, BrowserSessionStorageType } from "@gadget-client/my-app-slug";
export const api = new Client({
authenticationMode: {
browserSession: {
storageType: BrowserSessionStorageType.Temporary,
},
},
});
src/app.tsx
// import Gadget's react hooks for accessing data from your Gadget app
import { useAction, useFindMany } from "@gadgetinc/react";
// import the Gadget<->Shopify bindings that manage the auth process with Shopify
import { AppType, Provider as GadgetProvider, useGadget } from "@gadgetinc/react-shopify-app-bridge";
// import and use Shopify's react components like you might in other Shopify app
import { Button, Redirect, TitleBar } from "@shopify/app-bridge/actions";
// import the instance of the Gadget API client for this app constructed in the other file
import { api } from "./api";
export default function App() {
return (
// Wrap our main application's react components in the `<GadgetProvider/>` component to interface with Shopify
// This wrapper sets up the Shopify App Bridge, and will automatically redirect to perform the OAuth authentication if the shopify shop doesn't yet have the store installed.
<GadgetProvider type={AppType.Embedded} shopifyApiKey="REPLACE ME with api key from Shopify partners dashboard" api={api}>
<ProductManager />
</GadgetProvider>
);
}
// An example component that uses the Gadget React hooks to work with data in the Shopify backend
function ProductManager() {
const { loading, appBridge, isRootFrameRequest, isAuthenticated } = useGadget();
const [, deleteProduct] = useAction(api.shopifyProduct.delete);
const [{ data, fetching, error }, refresh] = useFindMany(api.shopifyProduct);
if (error) return <>Error: {error.toString()}</>;
if (fetching) return <>Fetching...</>;
if (!data) return <>No products found</>;
// Set up a title bar for my embedded app
const breadcrumb = Button.create(appBridge, { label: "My breadcrumb" });
breadcrumb.subscribe(Button.Action.CLICK, () => {
appBridge.dispatch(Redirect.toApp({ path: "/breadcrumb-link" }));
});
const titleBarOptions = {
title: "My page title",
breadcrumbs: breadcrumb,
};
TitleBar.create(appBridge, titleBarOptions);
return (
<>
{loading && <span>Loading...</span>}
{/* A user is viewing this page from a direct link so show them the home page! */}
{!loading && isRootFrameRequest && <div>Welcome to my cool app's webpage!</div>}
{!loading &&
isAuthenticated &&
data.map((product) => (
<button
onClick={(event) => {
event.preventDefault();
void deleteProduct({ id: product.id }).then(() => refresh());
}}
>
Delete {product.name}
</button>
))}
</>
);
}
@shopify/app-bridge-react
allows you to specify a custom router configuration to manage client-side routing. Similarly, the Gadget provider will allow you to specify a custom router which will be forwarded to the App Bridge.
// import Gadget's react hooks for accessing data from your Gadget app
// import the Gadget<->Shopify bindings that manage the auth process with Shopify
import { AppType, Provider as GadgetProvider } from "@gadgetinc/react-shopify-app-bridge";
// import and use Shopify's react components like you might in other Shopify app
import { useMemo } from "react";
// import the instance of the Gadget API client for this app constructed in the other file
import { BrowserRouter, useLocation, useNavigate } from "react-router-dom";
import { api } from "./api";
// import your app's custom routes
import Routes from "./Routes";
function App() {
const navigate = useNavigate();
const location = useLocation();
const history = useMemo(() => ({ replace: (path) => navigate(path, { replace: true }) }), [navigate]);
const router = useMemo(
() => ({
location,
history,
}),
[location, history]
);
return (
// Wrap our main application's react components in the `<GadgetProvider/>` component to interface with Shopify
// This wrapper sets up the Shopify App Bridge, and will automatically redirect to perform the OAuth authentication if the shopify shop doesn't yet have the store installed.
<GadgetProvider
type={AppType.Embedded}
shopifyApiKey="REPLACE ME with api key from Shopify partners dashboard"
api={api}
router={router}
>
<Routes />
</GadgetProvider>
);
}
export default function AppWrapper() {
return (
<BrowserRouter>
<App />
</BrowserRouter>
);
}
FAQs
<img alt="GitHub CI status" src="https://badgen.net/github/checks/ga
The npm package @gadgetinc/react-shopify-app-bridge receives a total of 6,657 weekly downloads. As such, @gadgetinc/react-shopify-app-bridge popularity was classified as popular.
We found that @gadgetinc/react-shopify-app-bridge demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 6 open source maintainers collaborating on the project.
Did you know?
Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.
Research
Malicious npm packages posing as Telegram bot libraries install SSH backdoors and exfiltrate data from Linux developer machines.
Security News
pip, PDM, pip-audit, and the packaging library are already adding support for Python’s new lock file format.
Product
Socket's Go support is now generally available, bringing automatic scanning and deep code analysis to all users with Go projects.