src/ShopifyApp/Middleware/AuthProxy.php
public function handle(Request $request, Closure $next)
    {
        // Grab the query parameters we need, remove signature since its not part of the signature calculation
        $query = $request->query->all();
        $signature = $query['signature'];
        unset($query['signature']);

        // Build a local signature
        $signatureLocal = ShopifyApp::createHmac(['data' => $query, 'buildQuery' => true]);
        if ($signature !== $signatureLocal || !isset($query['shop'])) {
            // Issue with HMAC or missing shop header
            return Response::make('Invalid proxy signature.', 401);
        }

        // Save shop domain to session
        Session::put('shopify_domain', ShopifyApp::sanitizeShopDomain($request->get('shop')));

        // All good, process proxy request
        return $next($request);
    }
public function handle(Request $request, Closure $next)
    {
        // Grab the query parameters we need, remove signature since its not part of the signature calculation
        $query = $request->query->all();
        $signature = $query['signature'];
        unset($query['signature']);

        // Build a local signature
        $signatureLocal = ShopifyApp::createHmac(['data' => $query, 'buildQuery' => true]);
        if ($signature !== $signatureLocal || !isset($query['shop'])) {
            // Issue with HMAC or missing shop header
            return Response::make('Invalid proxy signature.', 401);
        }

        // Save shop domain to session
        Session::put('shopify_domain', ShopifyApp::sanitizeShopDomain($request->get('shop')));

        // All good, process proxy request
        return $next($request);
    }
Handle an incoming request to ensure it is valid.

@param \Illuminate\Http\Request $request
@param \Closure                 $next

@return mixed