api security issue

Topic summary

A developer is seeking guidance on securing API requests in their Shopify app. Specifically, they want to ensure their Node.js backend can verify that incoming requests (containing shop ID and subscription plan data) originate from Shopify rather than unauthorized third parties.

Current Status:

  • The question remains unanswered in this thread
  • Another user redirected the developer to the Shopify Developer Community forum as a more appropriate venue for app development questions

The discussion appears to be in the wrong forum category and will likely need to be reposted elsewhere for technical assistance.

Summarized with AI on October 28. AI used: claude-sonnet-4-5-20250929.

i have devloped shopify app in which shopid and subscription plan is going to backend { nodejs } , how to secure that api means how my backend is going to known that these api request is coming from shopify only not by any other third party .

Hi Sachin,

Shopify Developer Community is better place to discuss app development issue. You may check it out.