{"id":21826419,"url":"https://github.com/byjpr/plug_shopify_verify_timestamp","last_synced_at":"2026-05-21T07:05:43.810Z","repository":{"id":48575528,"uuid":"386604037","full_name":"byjpr/plug_shopify_verify_timestamp","owner":"byjpr","description":"Validates inbound connection timestamp delta, designed for Shopify App Bridge","archived":false,"fork":false,"pushed_at":"2021-07-19T23:11:29.000Z","size":35,"stargazers_count":1,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"main","last_synced_at":"2025-02-27T12:13:15.011Z","etag":null,"topics":["app-bridge","elixir","plug","security","shopify","shopify-app","shopify-embedded-applications"],"latest_commit_sha":null,"homepage":"","language":"Elixir","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"agpl-3.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/byjpr.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2021-07-16T10:51:59.000Z","updated_at":"2021-07-19T23:08:18.000Z","dependencies_parsed_at":"2022-09-26T18:21:52.971Z","dependency_job_id":null,"html_url":"https://github.com/byjpr/plug_shopify_verify_timestamp","commit_stats":null,"previous_names":[],"tags_count":1,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byjpr%2Fplug_shopify_verify_timestamp","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byjpr%2Fplug_shopify_verify_timestamp/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byjpr%2Fplug_shopify_verify_timestamp/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/byjpr%2Fplug_shopify_verify_timestamp/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/byjpr","download_url":"https://codeload.github.com/byjpr/plug_shopify_verify_timestamp/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":244795430,"owners_count":20511519,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["app-bridge","elixir","plug","security","shopify","shopify-app","shopify-embedded-applications"],"created_at":"2024-11-27T18:03:56.956Z","updated_at":"2026-05-21T07:05:38.790Z","avatar_url":"https://github.com/byjpr.png","language":"Elixir","funding_links":[],"categories":[],"sub_categories":[],"readme":"# PlugShopifyVerifyTimestamp\n\nWhen Shopify embeds your app into the Shopify Admin it also includes a bunch of variables in URL Parameters. Those are `shop`, `timestamp` and `hmac`. Together these variables allow you to verify the legitimacy of a request. This package allows you to verify the \"timestamp\" component (it does not validate it against the hmac) has not elapsed a configured window.\n\n## Usage\nIn the pipeline you would like to timestamp verify, add `plug PlugShopifyVerifyTimestamp, max_delta: 5, halt_on_error: true` to create a 5 second grace period between the request being sent and it being recieved.\n\n```elixir\npipeline :embedded do\n  plug PlugShopifyVerifyTimestamp, max_delta: 5, halt_on_error: true\nend\n```\n\n## Installation\n\nThe package can be installed by adding `plug_shopify_verify_timestamp`\nto your list of dependencies in `mix.exs`:\n\n```elixir\ndef deps do\n  [\n    {:plug_shopify_verify_timestamp, \"~\u003e 0.1.0\"}\n  ]\nend\n```","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyjpr%2Fplug_shopify_verify_timestamp","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fbyjpr%2Fplug_shopify_verify_timestamp","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fbyjpr%2Fplug_shopify_verify_timestamp/lists"}