@shopify/shopify-app-remix/src/server/authenticate/helpers/validate-session-token.ts

Shopify Remix - to simplify the building of Shopify Apps with Remix

import {JwtPayload} from '@shopify/shopify-api';

import type {BasicParams} from '../../types';

import {respondToInvalidSessionToken} from './respond-to-invalid-session-token';
import {getShopFromRequest} from './get-shop-from-request';

interface ValidateSessionTokenOptions {
  checkAudience?: boolean;
  retryRequest?: boolean;
}

export async function validateSessionToken(
  params: BasicParams,
  request: Request,
  token: string,
  {checkAudience = true, retryRequest = true}: ValidateSessionTokenOptions = {},
): Promise<JwtPayload> {
  const {api, logger} = params;
  const shop = getShopFromRequest(request);
  logger.debug('Validating session token', {shop});

  try {
    const payload = await api.session.decodeSessionToken(token, {
      checkAudience,
    });
    logger.debug('Session token is valid - validated', {
      shop,
      payload: JSON.stringify(payload),
    });

    return payload;
  } catch (error) {
    logger.debug(`Failed to validate session token: ${error.message}`, {
      shop,
    });

    throw respondToInvalidSessionToken({params, request, retryRequest});
  }
}