HMAC verification - required only during installation or for each request?

policenauts1
Trailblazer
173 13 32

Hello, I'm confused about when my app should be verifying hmac - is it only during initial installation with OAuth, or for every request? My assumption is that since hmac is appended every time someone enters my app then I should be verifying every request, is that correct? 

 

However, I'm confused since the documentation only lists it in the OAuth instructions: https://shopify.dev/tutorials/authenticate-with-oauth#verification

 

Many thanks!

0 Likes