Re: Cannot complete OAuth process. Could not find an OAuth cookie for shop url

Cannot complete OAuth process. Could not find an OAuth cookie for shop url

Shopify Partner
11 0 8

We are starting to now integrate with Shopify using Node/Express, and i'm having issues with the cookie not being there after authentication to verify it. 


API_KEY: 'xxxxxxxxxx',
API_SECRET_KEY: 'xxxxxxxxxxx',
SCOPES: ['write_products'],
API_VERSION: ApiVersion.October21,
redirect url works and auth is completed:
const shopifyUrl = await Shopify.Auth.beginAuth(req, res, '', '/api/integration/shopify/auth', true);
console.log('hit getShopifyAuthUrl', req.cookies);
This console.log shows the following:

hit getShopifyAuthUrl {

  shopify_app_session: 'xxxxxxxxxxx',

  'shopify_app_session.sig': 'xxxxxxxxxxx',



Then in the validate part,

console.log('hit validateShopifyToken', req.cookies);
const session = await Shopify.Auth.validateAuthCallback(req, res, req.query);
This log is an empty object which i think is my issue.

hit validateShopifyToken [Object: null prototype] {}


I have followed the video on: and i'm out of ideas on what the issue is.


I have moved the Shopify.Context all over the place to avoid it possibly resetting on each network call, to no avail. 


Any ideas?

Replies 5 (5)

Shopify Partner
21 0 67

I have this problem too. It is unclear what the next steps should be to fix this.

Shopify Partner
11 0 8

I have since moved to not using the SDK, and just using axios, and everything was smooth sailing ever since. Another reason SDKs just aren't worth it in most cases...

URL to redirect them to the authorize page:

Then once that is completed they are redirected to my api's next step and i do the following:
const { data } = await`https://${}/admin/oauth/access_token`, {
client_id: process.env.SHOPIFY_PUBLIC_KEY,
client_secret: process.env.SHOPIFY_SECRET_KEY,
code: req.query.code,
And take data.access_token and store it.
Shopify Partner
4 0 2

How do you get the state query ? can you explain "state=${req.userId}|${req.query.redirect}"

Shopify Partner
11 0 8

The state query is something that shopify allows you to pass to them, and they will then pass back to you once the request is completed. It is not required. But in my case, users have the ability to auth with shopify via our app, and also discover us in the Shopify app store. 


If they did it via our app, they have an account, so once they authed I needed to know who authed so as to save the auth token in our DB to the user who did it.

If they did it via Shopify, req.userId is undefined, so i would send them to our signup where they would either login or signup.


Here is what we're doing with that req.userId

if (userId !== 'undefined') {
    Authed via our app
    Check if we are updating an expired token, or creating a new one
    if (updating) {
       update using req.userId
    } else {
       Create new row in DB using req.userId
auth completed, send to success page
  return `${process.env.DOMAIN}/export-auth/success`;
did this from shopify, so we need to get them to signup/login
return state: `${process.env.DOMAIN}/signup?vendor=Shopify&shop=${}&code=${data.access_token}`,
Shopify Partner
4 0 2

thank you kind sir, your comments are very informative .
so following your comments am trying to create a shopify app without the SDK,
and i have two questions if you could help me:
1- i can subscribe to shopify webhooks using axios and the  POST '/webhooks' route gets triggered when subscribed event happen, my question is how to get the webhook body on my route ? req.body is undefined.
2- am planning to allow only known shops to install my app, will that cause the shopify app review to fail ? didn't try tho, still using the development store
with or without reply i want to thanks sir you already been a huge help to me.