Working on a custom app. I have got the oauth working such that I now have an access_token that works to query the admin api. For the app I have chosen an app url of www.mydomain.com/install which redirects for the oauth / install. This seems inline with documentation.
Once the app is installed it seems the www.mydomain.com/install is called any time the embedded app is loaded in the store admin where it is installed and the oauth occurs (but correctly the permissions dialog is not shown after initial install).
Is there a way to check that the app is "installed" in my www.mydomain.com/install so that the oauth is skipped after the initial install (assuming I have saved the access_token which gives access to the apis)?
And why would I want more than one Allowed Redirection URL?