Authorization code grant blocked by cloudflare

Hi,

I followed the “Implement authorization code grant manually” topic to create an application using the dev dashboard.

My final goal is to get a permanent token to call Shopify using GraphQL.

I created the /install controller and a /callback one (I’m using the shopify-api node module). I also configured a new version on my app with this url.

When I call for installation I see this two logs :

[2026-03-02T15:00:54Z] [shopify-api/INFO] Beginning OAuth | {shop: ``smala-test.myshopify.com``, isOnline: false, callbackPath: /shopify/auth/callback}

[2026-03-02T15:00:54Z] [shopify-api/DEBUG] OAuth started, redirecting to https://smala-test.myshopify.com/admin/oauth/authorize?client_id=xxxxxx&scope=write_products%2Cwrite_publications%2Cwrite_customers%2Cread_locations%2Cread_inventory%2Cread_markets_home%2Cwrite_store_credit_account_transactions&redirect_uri=https%3A%2F%2Fmy-api-url.com%2Fshopify%2Fauth%2Fcallback&state=535028318162990&grant_options\[\]= | {shop: smala-test.myshopify.com, isOnline: false}

And then I simply have a page with the text : “Your connection needs to be verified before you can proceed”.

I set the install url on my version so that the call is made from the Shopify installation process. I tried with a prive window.

I don’t have any more idea. Is someone have one ?

Thank you.

Charlie.