Storefront API Generation of delegate access token Shopify-Storefront-Private-Token

Retired Boards Appdev Custom Storefronts
14

Hi JCC

Thanks for letting us know the new documentation is up. It looks as if this has been revised a little in the last day or so. But for those looking I’ve managed to successfully create a token!

What the documentation doesn’t make clear is what has changed. It is now possible to create a delegate access token with various unauthenticated scopes.

Below is the GraphQL admin API mutation required to create a delegate token with the correct access scopes to be used in the Shopify-Storefront-Private-Token header. The access scope list used is identical to that of a token created using the storefrontAccessTokenCreate mutation.

mutation {
  delegateAccessTokenCreate(input: { delegateAccessScope: [
    "unauthenticated_read_content",
    "unauthenticated_read_customer_tags",
    "unauthenticated_read_product_tags",
    "unauthenticated_read_product_inventory",
    "unauthenticated_read_product_listings",
    "unauthenticated_write_checkouts",
    "unauthenticated_read_checkouts",
    "unauthenticated_write_customers",
    "unauthenticated_read_customers",
    "unauthenticated_read_selling_plans",
    "unauthenticated_read_product_pickup_locations"
   ] 
  })
  {
    delegateAccessToken {
      accessToken
    }
    shop {
      id
    }
    userErrors {
      field
      message
    }
  }
}

It would be great if we could see the delegate access token documentation updated with a list of valid scope strings and perhaps even an example like the above :blush: