feat: Onchain integration of sales data and distribution of sales to nft holders function

[0xShin0221]

[0xShin0221]

@sa4mi
I would like to discuss the following points:

Configuration for receiving webhook through api/order/paid:

To receive the webhook through this API, it is necessary to register this API in Shopify as a prerequisite. Currently, it seems that the registration was most likely done by @sa4mi through the Shopify GUI, but it will be necessary to register it at some point. For example, it could have been registered during the initial CreateDAO by adding the AccessToken. The API documentation can be found at the following link:
https://shopify.dev/docs/api/admin-rest/2022-10/resources/webhook#post-webhooks
Are there any other suitable methods available?

Security restrictions:

Regarding the API api/order/paid, the plan is to write the information received from the webhook API into a smart contract. This means that calling this API should be limited to specific entities to ensure security. Otherwise, it could be freely called and potentially misused.
Currently, the following restrictions are considered feasible measures:

Matching Shopify's header and order_status_uri with the storeUrl stored in the AccessTokenWalletAddress table.
Are there any other considerations or measures that should be taken into account?

*1 Here is an example of the function used for writing:
https://github.com/0xShin0221/Protocol_ShopDAOGenerator_Chainlink2023/blob/7414ee3b67d35926521b379b46cca71f7794180b/src/chainlink/SalesDistributor.sol#L41

*2 For more information about order_status_url, please refer to the following link:
0xShin0221/Protocol_ShopDAOGenerator_Chainlink2023#2 (comment)

[sa4mi]

@0xShin0221

it will be necessary to register it at some point. For example, it could have been registered during the initial CreateDAO by adding the AccessToken. The API documentation can be found at the following link:
https://shopify.dev/docs/api/admin-rest/2022-10/resources/webhook#post-webhooks

It is suitable and I have no other idea. Your idea is excellent!

Matching Shopify's header and order_status_uri with the storeUrl stored in the AccessTokenWalletAddress table.
Are there any other considerations or measures that should be taken into account?

It is also suitable. if I were to do it, I would proceed similarly.