I am attempting to remove the unstable_newEmbeddedAuthStrategy on my own custom app right now and see if I can get rid of the 302 redirect. I will report back after.
My app has a bit of a unique set up that I am hoping to accomplish: 1 hosted codebase, multiple custom apps pointing at it. I haven’t really seen anyone take this approach before so I’m hoping it is possible. On my development store, the original app that I created loads normally but the other custom apps get the 302 redirect from /app and end up on /auth/session_token with a 200 but the page doesn’t display anything.
This did change where the 302 redirect was navigating in the “Location” header, but did not solve the issue. It is now navigating to /auth/exit-iframe and the app page displays nothing.