difference between admin api access token (starting with shpua, shpat, shpss etc..)

[hkr4274]

I created an starter app using shopify cli.

I tried to print session.access_token.

The token started with shpua _...

I was then checking out a 3rd party website which integrates Shopify with their own shopify app. I connected my store to their website by installing their app on my store.

I was able to view the access_token generated by installing their shopify app in my store (their dashboard shows the generated access_token)

It started with shpat _

My question is,

what is the difference between these tokens starting differently (shpat, shpua,...) ?

where can i find more information related to them ?

is this important to consider ?

I cannot find anything explaining the difference between these tokens.

Any suggestions would be helpful.

Thanks in advance,

hkr4274.

[JamesG · Accepted solution]

Hi @hkr4274 

The prefix attached to an app's access token should correspond to the type of app it's been generated for. The information on this formatting is detailed in our API change log from April 2020.

Hope that helps.

[DarwynnF]

a static prefix of shpat _ (for public apps), shpca  _ (for custom apps), or shppa_ (for legacy private apps).

What is shpua _?

[JamesG]

Hi again @DarwynnF 

Sorry I didn't clarify for all prefixes. From looking at a couple of my own apps' access tokens, the `shpua_` prefix is only appearing on my new apps that are still listed as undecided in the partner dashboard.

Hope that helps.

[DarwynnF]

Thanks JamesG.