Shopify Setup

{% comment %} Refuel Affiliate Widget {% endcomment %}
<script
  src="https://sdk.refuel.dev/v1.js"
  data-key="pk_your_publishable_key"
  data-position="bottom-right"
  async
></script>

import express from "express";
import crypto from "crypto";

const app = express();
const SHOPIFY_SECRET = process.env.SHOPIFY_WEBHOOK_SECRET!;
const REFUEL_API_KEY = process.env.REFUEL_API_KEY!; // your sk_... key

app.post(
  "/webhooks/shopify/orders",
  express.raw({ type: "application/json" }),
  async (req, res) => {
    // Verify Shopify signature
    const hmac = req.headers["x-shopify-hmac-sha256"] as string;
    const hash = crypto
      .createHmac("sha256", SHOPIFY_SECRET)
      .update(req.body)
      .digest("base64");

    if (hmac !== hash) {
      return res.status(401).send("Invalid signature");
    }

    const order = JSON.parse(req.body.toString());

    // Extract the affiliate code from the order's landing page URL
    // Shopify stores the landing_site in the order object
    const landingSite = order.landing_site || "";
    const refMatch = landingSite.match(/[?&]ref=([^&]+)/);

    if (!refMatch) {
      // No affiliate attribution -- skip
      return res.json({ ok: true, attributed: false });
    }

    const affiliateCode = refMatch[1];

    // Send conversion to Refuel
    const response = await fetch("https://api.refuel.dev/track/conversion", {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        "x-api-key": REFUEL_API_KEY,
      },
      body: JSON.stringify({
        orderId: String(order.id),
        orderValue: Math.round(parseFloat(order.total_price) * 100), // convert to cents
        currency: order.currency,
        affiliateCode,
        metadata: {
          shopifyOrderNumber: order.order_number,
          customerEmail: order.email,
        },
      }),
    });

    const result = await response.json();
    console.log("Refuel conversion:", result);

    res.json({ ok: true, attributed: true, conversionId: result.data?.conversionId });
  }
);

app.listen(3000);

{% if first_time_accessed %}
<script>
  // Read the affiliate code from the Refuel cookie
  const refCode = document.cookie
    .split("; ")
    .find(c => c.startsWith("_refuel_ref="))
    ?.split("=")[1];

  if (refCode) {
    fetch("https://api.refuel.dev/track/conversion", {
      method: "POST",
      headers: {
        "Content-Type": "application/json",
        "x-api-key": "sk_your_secret_key"  // Note: exposed client-side
      },
      body: JSON.stringify({
        orderId: "{{ order.id }}",
        orderValue: {{ order.total_price | times: 100 | round }},
        currency: "{{ order.currency }}",
        affiliateCode: refCode
      })
    });
  }
</script>
{% endif %}