I'm building a custom storefront using the storefront api while still using as much traditional routing as possible.
I'm logging my users in via the `customerAccessTokenCreate` Storefront API graphql mutation and a access token is being returned which I'm storing in localStorage.
mutation customerAccessTokenCreate($input: CustomerAccessTokenCreateInput!) {
customerAccessTokenCreate(input: $input) {
customerAccessToken {
accessToken
expiresAt
}
customerUserErrors {
code
field
message
}
}
}
I use this token to retrieve a customers orders from the `customer` query. Within the order I'm returning a customerUrl which looks something like this: https://<shop-name>.myshopify.com/account/orders/e29f857561d8793cfa42606297a0216f
query Orders($customerAccessToken: String!) {
customer(customerAccessToken: $customerAccessToken) {
orders(first: 250) {
edges {
node {
id
customerUrl
}
}
}
}
}
When I click this link I get redirected to a login page like the backend hasn't registered that a user has been logged in.
What am I doing wrong here please? I appreciate that the access token only authenticates the queries I'm running on the frontend, but how can I tell the route guard to let me past if I'm not doing the more traditional login? Could I add the access token to the URL?
