Shopify Oauth Catcher

Search the build

3 commits indexed

1. 26ea658 2026-05-19 feat(server): 404-guard snapshot file paths
2. 8d63f76 2026-05-19 chore(gitignore): broaden to ignore editor/snapshot detritus
3. 809a878 2026-05-13 initial scaffold

Authors

• Steve3

Creative ideas + design notes

Commits with substantial prose (≥120 chars) — the rationale behind each move.

Adds Express middleware that rejects any request path matching common
editor/snapshot extensions (.bak, .bak.<x>, .pre-*, .orig, .rej, .swp,
trailing ~) with a 404 before reaching any route or static handler.

Defense-in-depth — if a future static dir is added or a stray snapshot
file is left in the deploy tree (or exposed via a misconfigured proxy),
it cannot leak source / config / token-shaped content over HTTP.

OAuth flow unchanged: /install and /callback handlers untouched.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Adds *.bak, *.bak.*, *.pre-*, *.orig, *.rej, *.swp, *~ so stray
snapshot files from refactor passes don't sneak into git.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

File tree

5 files tracked. Click any to browse the source at HEAD.

• .gitignore
• ecosystem.config.cjs
• package-lock.json
• package.json
• server.js

Other build journals

← Shopify Apps  ·  all 4 projects  ·  Shopify Oauth Handler →

Export

commits.csv · feed.atom · project.json · commits.json