this is function that do the magic.
public function get_and_redirect_auth_url($shop_url)
{
$scopes = [
'read_orders', 'write_orders',
'read_fulfillments', 'write_fulfillments',
'read_assigned_fulfillment_orders', 'write_assigned_fulfillment_orders',
'read_merchant_managed_fulfillment_orders', 'write_merchant_managed_fulfillment_orders',
'read_third_party_fulfillment_orders', 'write_third_party_fulfillment_orders'
];
$local_url = 'https://'.SITE_URL.'/auth/shopify.php';
$redirect = $this->client->getAuthUrl($scopes, $local_url);
header("Access-Control-Allow-Origin: *");
//header('Access-Control-Allow-Methods: GET, PUT, POST, DELETE, OPTIONS, post, get');
//header("Access-Control-Max-Age", "3600");
//header('Access-Control-Allow-Headers: Origin, Content-Type, X-Auth-Token');
//header("Access-Control-Allow-Credentials: true");
//header("Location: {$redirect}");
echo '
<!DOCTYPE html>
<html>
<head>
<title>Redirecting, please wait...</title>
<script>
document.addEventListener("DOMContentLoaded", function () {
var redirectUri = "'.$local_url.'";
var permissionURL = "'.$redirect.'";
if (window.top == window.self) {
window.location.assign(permissionURL);
} else {
var AppBridge = window["app-bridge"];
var createApp = AppBridge.default;
var Redirect = AppBridge.actions.Redirect;
const app = createApp({
apiKey: "'.self::$api_key.'",
forceRedirect: true,
host: new URLSearchParams(location.search).get("host")
});
Redirect.create(app).dispatch(Redirect.Action.REMOTE, permissionURL);
}
});
</script>
</head>
<body>
Redirecting, please wait...
</body>
</html>
';
die();
}
