Mandatory Webhook - How to use endPoints with Token authorization ?

[dlornage]

Hi all,

To fill in the GDPR mandatory webhooks section, I need to put 3 endPoints which return 200.

My endPoints need token authorization, where can I specify it ?

Thanks for your assistance

[Liam · Accepted solution]

Hi Dlornage,

The GDPR webhooks are supposed to be publicly accessible, meaning they should respond with a 200 status without needing any kind of authorization. This is because when Shopify sends a request to these endpoints, it's not going to include an authorization token.

If your endpoints require authorization and you cannot change this, one potential workaround could be to create a proxy endpoint for each that doesn't require authorization. These proxy endpoints would then forward the request to your actual endpoints, including the necessary authorization. But this would need to be handled on your server side, not through Shopify.

Hope this helps,

[dlornage]

Thank you Liam, perfectly clear !