Have your say in Community Polls: What was/is your greatest motivation to start your own business?
Our Partner & Developer boards on the community are moving to a brand new home: the .dev community forums! While you can still access past discussions here, for all your future app and storefront building questions, head over to the new forums.

difference between admin api access token (starting with shpua, shpat, shpss etc..)

Solved

difference between admin api access token (starting with shpua, shpat, shpss etc..)

hkr4274
Shopify Partner
1 0 0

I created an starter app using shopify cli.

I tried to print session.access_token.

The token started with shpua _...

I was then checking out a 3rd party website which integrates Shopify with their own shopify app. I connected my store to their website by installing their app on my store.

I was able to view the access_token generated by installing their shopify app in my store (their dashboard shows the generated access_token)

It started with shpat _

 

My question is,

what is the difference between these tokens starting differently (shpat, shpua,...) ?

where can i find more information related to them ?

is this important to consider ?

I cannot find anything explaining the difference between these tokens.

Any suggestions would be helpful.

 

Thanks in advance,

hkr4274.

Accepted Solution (1)

JamesG
Shopify Staff
42 10 11

This is an accepted solution.

Hi @hkr4274 

The prefix attached to an app's access token should correspond to the type of app it's been generated for. The information on this formatting is detailed in our API change log from April 2020.

 

Hope that helps.

JamesG | API Support @ Shopify 
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 - To learn more visit Shopify.dev or the Shopify Web Design and Development Blog

View solution in original post

Replies 4 (4)

JamesG
Shopify Staff
42 10 11

This is an accepted solution.

Hi @hkr4274 

The prefix attached to an app's access token should correspond to the type of app it's been generated for. The information on this formatting is detailed in our API change log from April 2020.

 

Hope that helps.

JamesG | API Support @ Shopify 
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 - To learn more visit Shopify.dev or the Shopify Web Design and Development Blog

DarwynnF
Shopify Partner
2 0 0

a static prefix of shpat _ (for public apps), shpca  _ (for custom apps), or shppa_ (for legacy private apps).

What is shpua _?

JamesG
Shopify Staff
42 10 11

Hi again @DarwynnF 

Sorry I didn't clarify for all prefixes. From looking at a couple of my own apps' access tokens, the `shpua_` prefix is only appearing on my new apps that are still listed as undecided in the partner dashboard.

 

 

Hope that helps.

JamesG | API Support @ Shopify 
 - Was my reply helpful? Click Like to let me know! 
 - Was your question answered? Mark it as an Accepted Solution
 - To learn more visit Shopify.dev or the Shopify Web Design and Development Blog

DarwynnF
Shopify Partner
2 0 0

Thanks JamesG.