I have a private shopify app therefore I don't have local application running and also I don't have envirement variable HOST. How can I use this library with private app if Shopify.Context.initialize function use a config object ContextParams needs to have HOST_NAME key?
I have npm package "@shopify/shopify-api" version 1.2.1 installed and it has no Storefront API implemented. I don't know why there is no Storefront API in this version of package considering that github repo release with the same version has that API implemented.
Hi @Vyacheslav81 ... that was my intention too ...( use with PRIVATE APPS)
I did some tests and ... in fact I realize that did not work because do not make SENSE ( at least this was my understanding )
Because with Private apps ... you will authenticate every api call using key and password ...
Maybe an expert can explain better
@dgtlmonk no it's compatible with both private & public apps.
You may have mixed up and created an `.env` file but NextJS by default reads `.env.local`.
@dylanpierce apologies for deviating from the main topic, but do you have an example of how can a NextJS API route could consume the `sessionToken` for axios REST Admin API requests? I'm really close to have this working but I think I'm missing a critical step somewhere.
Thank you @dylanpierce, for the help here and for this useful library.
My difficulty was taking the accessToken given out by the middleware and use that to make REST Admin API requests, and that was because I was not passing the information through the `X-Shopify-Access-Token` header, which solved it for me, hopefully the proper way.
Oh I’m sorry, I misunderstood session token with access token.
For others reading this:
* Session Token == the frontend JWT authentication token for proving your merchant’s identity
* Access Token == the backend private key that represents your access to the merchant’s resources within the Shopify Admin API
The idea behind the session token is that it’s publicly accessible in the browser, but it will eventually expire.
The withSessionToken middleware proves that the merchant is using your app and is authenticated - however its up to your implementation to pull the shop’s Access Token from your backend database given the shop’s name (aka origin).
The next-js-shopify-toolbox package gives you the relevant middleware to retrieve this Access Token during OAuth, but it’s up to you to decide where to store it and how to retrieve it later.