I’m working on an Elixir implementation of Shopify’s Multipass feature – it’s basically a single-sign-on (SSO) flow that lets your app handle authentication, and on success, it produces a URL that when clicked will cause a customer record to be upserted into Shopify. They include working examples o…

Before diving too deep into this, can you try token = Base.url_encode64(message) EDIT I took the provided ruby code on the Shopify documentation, replaced dynamic values with static values (the json string and iv) and used the resulting token to set up a simple test. I think you already had it: …

Do you get a meaningful error? What exactly happens when you try this?

No error on generation, but when I click the link to head over to Shopify, I get a bad request error. Using the PHP or Ruby code samples results in a working link that logs me into the Shopify store.

[image] Ninigi: Just change Base.encode16/2 to Base.url_encode64/1 WOW. That has to be the best typo I’ve made in weeks! Base 16?!? I was so focused on the hard parts of the crypto stuff that I didn’t pay attention to the last bit. THANK YOU!!

For the record, here is the complete working proof-of-concept code: # Use your multipass secret from the Shopify Dashboard: Settings -> Checkout multipass_secret = "1234567890abcdef1234567890abcdef" block_size = 16 customer_data = %{ email: "test@test.shopify.com", created_at: DateTime.to_iso…

Yeah. That might be the reason behind the first rule of the crypto club: Don’t do crypto (on your own)

Good to hear you solved it :+1: If you have some spare time, a pull request to implement multipass would be more than welcome!

Sure – the process does require that customer data be JSON encoded. Can you recommend how to nicely implement that as a dependency? Or should I restructure the input to make the user do the JSON encoding outside of your package?

the package already uses Poison for json processing, so I think you should not have to introduce a new dependency :slight_smile:

PR for exshopify was merged and is available in version 0.9.0: exshopify | Hex PR for Adds Multipass functionality by fireproofsocks · Pull Request #65 · nsweeting/shopify · GitHub

Elixir Programming Language Forum

Shopify Multipass : Elixir Implementation

Questions & Help Questions

maz March 7, 2019, 5:37pm 7

It’s so easy to mess-up crypto.