HMAC Verification fails when accessing from admin, success when accessing from App Store!

[WebMedic]

Hi,

There is a very weird issue happening...

When you add my app from the App Store, it works.

When you click on my app from your admin panel on Shopify, it opens the exact same URL from the App Store, and does the exact same verification... but HMAC verification fails.

Which means the HMAC sent from the admin is requiring some kind of different verification from the one sent from App Store / Test app on development store.

What is wrong?

Thank you

[WebMedic · Accepted solution]

Figured it out

From the admin there is one more input: session

You need to take it into account when verifying HMAC if it exists