Hi,
We are building Shopify Embedded app which lets shops user,
- to view his products and its counts(using shopify admin’s products list api in backend).
- update product (description/seo description etc,..) with the content written in embedded app’s UI.(using shopify admin’s product update api in backend)
We are planning to use offline access and store access token of shops in DB.
So whenever embedded app requests the data, the flow will be something like this,
- App frontend makes request to app backend with session token fetched from App Bridge.
- Backend validates the session token, fetches shops access token from db, calls appropriate admin api and returns back the data.
My question is,
- Is there any issue in using Offline access for this use-case?
- If we are using offline access, whats the point of session storage?(in cookies/custom storage) isn’t it enough to validate session token in each request since we will be getting new tokens in every request?
Thank you,