I'm new to Shopify app development and I'm developing a public app using Node/Express JS.
The app contains several pages (and navigation links to access those pages) as shown in the screenshot below:
When I first click on the app from the admin, the query parameter comes with hmac to validate the request.
But when I start clicking on links from inside the app, (on Products and Home), the query parameter is empty so I'm unable to verify the request using hmac.
My question is:
Thanks in advance!
Solved! Go to the solution
This is an accepted solution.
In your use case, you need to carry request query params manually when navigating to new urls. As you may notice, your app is loaded inside an iframe. If a redirect happens inside iframe, Shopify doesn't have control to generate new hmac and timestamp. App Bridge does it for you via App Redirect action https://help.shopify.com/en/api/embedded-apps/app-bridge/actions/navigation/redirect#redirect-to-a-r...