How can I correctly fetch orders in my review app project?

[Tec1]

Hi, I am working on a Project where we have to fetch all orders after merchants enter his/her store domain but we are facing issues while app reviewing. I have sent the app multiple time for reviewing but every time my app got rejection. Actually what I am doing is the merchant enters his domain URL like: abc.myshopify.com  then I am 

authenticating the merchant by redirecting it to   /admin/oauth/authorize?client_id=XXXX. Then after Merchant consent, I am getting GET response, and then for getting an Access token I am using /admin/oauth/access_token.

Is this approach good, or need to change something?

Please help, they have sent the list of issues in my app. One of them is mentioned below.

When encouraging a merchant to install additional apps or connect the app to another store, apps must use the initiated from the app listing. You can't request a merchant's .myshopify.com URL.

Thank you!

[Tec1]

Thanks, @SofiiaAst for your reply,

I didn't understand embedded.