Shopify API questions

[souravchandra]

1. When we connect to Shopify using OAuth is it per Shopify account or per Shopify store?
2. Is there any API to list down all stores for a givenShopify account?
3. We are building an app to create product videos. Do we need to implement all 3 mandatory GDPR webhook endpoint or only store deletion endpoint is sufficient as we don't store any customer info, its only basic store data.

[vix · Accepted solution]

1. OAuth is per shop. Your app is requesting permission to make requests to the API on that specific shop. 

2. No only the shop: https://shopify.dev/docs/admin-api/rest/reference/store-properties

3. I cannot provide legal advice on the topic, however, we've put together some great resources: https://www.shopify.ca/partners/blog/gdpr-compliance 

[souravchandra]

Some followup questions

- Can shopify OAuth requests be made using store's custom domain?

- Can shopify API requests be made using store's custom domain?

- If oauth fails due to any reason is there a way to get reasons from json or xml object rather than parsing the html content?