I am trying to play around with the Storefront API that was announced last week at the Shopify Unite conference.
Using the traditional Shopify API in my toy app, when I do:
I get this error:
ActiveResource::ForbiddenAccess: Failed. Response code = 403. Response message = Forbidden.
Do I need to change a setting in my app, or to request a special access? It is not mentioned in the documentation how to get any authorization.
If you go to this page https://help.shopify.com/api/storefront-api/getting-started#accessing-the-storefront-graphql-endpoin... and then under the "obtaining a storefront access token" I think you will just have to edit your current app to have the below.
In the Custom Storefront section, be sure to select Allow this app to access data from your storefront.
Hope that helps
That would work for a private app. For my use case though, I am trying to work on a public app. :-)
The "Obtaining a Storefront Access Token" section that you point out has two sets of instructions, one for private apps, with the instructions you gave me above.
The other set of instructions are toggled when I click on the "Via the REST API" button, which I assume is for public apps:
When I try to create the token, I get the error mentioned in my original post.
In order to successfully create a Storefront Access Token, your application must request one of the following scopes during OAuth:
The Storefront Access Token will inherit any unauthenticated scopes from the access token that was used to created it.
An unauthenticated scope represents a level of access appropriate for an unauthenticated user, such as a customer on a storefront.
If you attempt to request a Storefront Access Token without having such a scope, you'll currently receive a 403 Forbidden error response.
Hope this helps to clear things up.
Thanks for your help, your solution worked. I didn't realize that those scopes had been added to the regular scopes, I imagined they would only be available for the acces token.
However, after I got my access token, I can't use it to request information from GraphQL. Whenever I try to use it, I get a `Bad request` with the error message `SyntaxError: Unexpected token < in JSON at position 1`. When I use the token available in the specific store settings, I can get results with the same query. Any help on that?
@Jamie_D_ thanks for providing some ways to troubleshoot creating Storefront Access Tokens, I have a public app in testing and I've tried including all of the unauthenticated access scopes but still am receiving a 401 on the `storefront_access_token.json` creation endpoint.
I've also tried turning my app into a sales channel and vice versa. Are storefront access tokens only available to private apps?