[Bug] State/nonce lost when redirected back to app during install

[BoxUp]

Testing again today and the installation process of my app suddenly doesn't work.

It seems that the state parameter I add to the query string in the redirect url doesn't come back once the user has agreed to install the app. Is this a bug or a change? As far as I can see in the docs below, it's still supposed to be supplied in the redirect URL.

https://shopify.dev/tutorials/authenticate-with-oauth

[ClementBR]

Same here!

The state parameter is not being sent to the oauth redirect url!

This is causing installations to fail. Can you please provide an update asap?!

[ClementBR]

Of course https://shopifystatus.com/ is always showing everything green as if nothing ever happens.

[kilian3]

Same problem here since yesterday !

The only way to receive the state param is to call the install url again. It redirects directly to the app with the right state param.

[ZainManji]

Same thing here! I posted this issue in this thread as well https://community.shopify.com/c/Shopify-APIs-SDKs/Updating-to-latest-version-of-shopify-koa-shopify-...

Both my apps, in the store face this issue and no one can install it smoothly. 

I don't see a state query param in the redirect URL after oauth, and i get the 

Request origin could not be verified 

error message 

[BoxUp]

Seems to be working now.

[ClementBR]

Yep. A fix was released according to support..

[ClementBR]

We had another instance of this issue about 4 hours ago. Is this solved?

[mike_batch]

I am getting the same issue out of nowhere so I guess it's not solved.

I tried to talk to support and they basically told me to post here 🤷‍♂️

It's crazy that an issue like being unable to install the app isn't getting more attention or visibility.

[JohnAtBonify]

Yep. This comes up regularly for us. People just get a 404 from Shopify when trying to install. We can't find any cause on our end. Super frustrating for both sides, especially when Shopify's support redirects the customer back to us instead of routing the issue internally to their engineers.