OAuth 2 without exposing callback url (console APP)

[cvialatte]

Hello,

I am analyzing the feasibility of developing a Console application that will synchronize stocks and products between Shopify and a third-party software.

So, my console application will need to access the Shopify API and send authenticated requests.

The documentation indicates that there are 2 types of applications (embedded or external) with 2 distinct authentication modes. But in both cases, it seems that the application necessarily needs to be a web application since the validation process involves exposing a URL to validate the installation request.

Does this mean that it is not possible to create a simple client application that does not expose an endpoint on the internet?

[cvialatte]

Ok, I think I have the answaer. I have to manually generate an access token with offline acces mode and keep it as it will never expire? Am I right ?