updating webhooks 2022

[brittliwallace]

I recently received an email from Shopify apps saying that my webhooks require updating before 4/1/22 (I've copied and pasted the content below). I do not have a partner or developer that maintains these, I simply built this store on my own. Can someone translate what this will affect for me, and what I need to do? I can follow a tutorial if need be, but this all sounds so foreign to me. I'm unsure if it's necessary need to hire an expert, if whatever this change is will even affect my store much.

"Your unsupported webhooks must be updated by a developer before April 1, 2022 to continue working normally."

"At least one of your webhooks have used a deprecated webhook version in the last 30 days. Support for these deprecated webhook versions will be removed on April 1, 2022. Please update the webhooks listed below to API version 2021-07 or later to ensure your webhook-driven workflows are not disrupted. Learn how to update to a newer webhook version here.

Store: Daily Threads Collective

Webhook: app/uninstalled
Breaking changes:

• The force_ssl field has been removed from the Shop REST Admin API. View change."

[sgray · Accepted solution]

Most of you are likely being notified because you have an app installed that hasn't yet made a very small change to remain compliant after April 1, 2022. It's nothing to worry about. I'm quite certain that the term "breaking change" is incorrect in regards to the force_ssl field. All requests to the REST API must use SSL and it's been that way for a good little while. Hence, force_ssl is deprecated, as it's always set to True. Regardless of anyone's wishes. For e-commerce, this is required to be compliant with PCI-DSS and it should have always been this way.

I do believe that most shop owners received this message erroneously. As the app/uninstalled webhook is primarily for notification headed to APP maintainers when you perform the uninstall action. They can do all sorts of things beyond being notified, like ask you to please tell them what you didn't like about it or whatever (offer you a discount to keep the app, say thank you and tell you about what an exciting future they have planned for the app, etc..).

You can check your webhooks from the Admin dashboard, go to the bottom of the page and select settings in the bottom left, then select Notifications from the left sidebar, then scroll ~ALL~ the way down and most of you will see you have not setup any webhooks. Some of you may have, or you may have had a developer who did. But, if you don't see the related webhook there and you're also not an app maintainer/developer, you can safely ignore the e-mail. As always, to be doubly safe, feel free to contact support. It's their mistake that you received the e-mail anyway, so you will not be bothering anyone.

- Stuart Gray

Gray Hat Freelancing

Network and Systems Engineer

F/OSS Contributor and Maintainer

Atlanta, GA (America/New_York)
"Sniff packets, not glue, ya bums..."

[Kellsb]

I had similar email too and I don’t know what to do. I built my store and not sure if i’m using webhooks. I need help.

[AllyThonsgaard]

I got the same thing and digging around... can't figure out exactly what happened.

[Marllz]

im also having the same email from shopify although i dont have any webhooks on my settings

[cherylfoh]

We got the same email about the same webhook.

[Jax21]

I’ve just received the same email… not sure where to go with this either as I just built my site

[Purpletitanium]

I just contacted customer support and the lady advised me that the email was in fact from them but it had to do with app developers.  She said there was nothing I need to do unless I am developing apps.  Hopefully she is correct.

[octoolhouse]

This seems to be a canned email that went out to everyone regardless if they are using them or not. 

The fact it states "At least one of your webhooks have used a deprecated webhook version in the last 30 days." is concerning, because that to me means the themes are using them somewhere. Unless that is a canned and poor chose of words. But that wouldn't surprise me as I am liking Shopify less and less as time goes on.

I look at the version and it has something to do with the cart. I have a plugin for payments added to my cart, perhaps I am using the webhook that will be trashed soon.

[sgray · Accepted solution]

Most of you are likely being notified because you have an app installed that hasn't yet made a very small change to remain compliant after April 1, 2022. It's nothing to worry about. I'm quite certain that the term "breaking change" is incorrect in regards to the force_ssl field. All requests to the REST API must use SSL and it's been that way for a good little while. Hence, force_ssl is deprecated, as it's always set to True. Regardless of anyone's wishes. For e-commerce, this is required to be compliant with PCI-DSS and it should have always been this way.

I do believe that most shop owners received this message erroneously. As the app/uninstalled webhook is primarily for notification headed to APP maintainers when you perform the uninstall action. They can do all sorts of things beyond being notified, like ask you to please tell them what you didn't like about it or whatever (offer you a discount to keep the app, say thank you and tell you about what an exciting future they have planned for the app, etc..).

You can check your webhooks from the Admin dashboard, go to the bottom of the page and select settings in the bottom left, then select Notifications from the left sidebar, then scroll ~ALL~ the way down and most of you will see you have not setup any webhooks. Some of you may have, or you may have had a developer who did. But, if you don't see the related webhook there and you're also not an app maintainer/developer, you can safely ignore the e-mail. As always, to be doubly safe, feel free to contact support. It's their mistake that you received the e-mail anyway, so you will not be bothering anyone.

- Stuart Gray

Gray Hat Freelancing

Network and Systems Engineer

F/OSS Contributor and Maintainer

Atlanta, GA (America/New_York)
"Sniff packets, not glue, ya bums..."

[SanjaJ]

Thank you- I already wrote to the support in Germany.Let' s see what they will tell me. BR Sanja

[brittliwallace]

Thank you so much for your insight. I checked where you suggested and I do not have any created. Thanks!

[Gardendecornmor]

Thank you, I do not need to hire anyone,correct?    

[SanjaJ]

Hi,

I got exactly the same mail yesterday and today, made the shop by my own and my shop is brand new- running since last weekend :)- no old apps, no selfmade webhooks, nothing. I do not find this webhook and I suppose that there must be a mistake somehow. I will contact the support and let you know wht they said. BR Sanja

[cspags · Accepted solution]

Hey, so looks like a bunch of people have received this same email. I went ahead and called shopify and she looked at my store. She saw I do not have any webhooks (like you) therefore there is NO ACTION REQUIRED - good news! She did take a look internally and she mentioned they are investigating it further as to why merchants received this email. Hope this puts your mind to rest because I was freaking out!

Best,

CS

[brittliwallace]

Whew!! Sweet, thanks!

[CatSop]

Really useful thank you for sharing. I made the mistake of enquiring with the Shopify pros for hire, who quoted me $150 without really delving too much into it. I naturally declined. As you were!

[Gardendecornmor]

I almost hired an expert!

[sgray]

The message was intended for App maintainers.

[Gardendecornmor]

Did you ever get a response?

[burgerman]

Same email received but no Webhooks setup