Embedded app checks stuck (App Bridge from CDN first in <head> + session tokens working) - requesting manual verification

Hi team,

Both “Embedded app checks” on my app submission page have been pending for over 24 hours and will not turn green, even though the app meets both requirements. Requesting a manual verification.

App: Simpll Wishlist
Client ID: 113d043817b7648c5652887757d955b2
Framework: @shopify/shopify-app-react-router v1.1.0 (React Router v7), App Bridge v4 loaded from CDN

Checks still pending:

  • Using the latest App Bridge script loaded from Shopify’s CDN
  • Using session tokens for user authentication
  1. App Bridge is loaded from Shopify’s CDN as the FIRST script in , with the shopify-api-key meta tag before it, server-rendered into the initial HTML:
...

There is exactly one App Bridge script tag on the page. Nothing is bundled and there are no duplicate copies.

  1. Session tokens are used for authentication on every request. Every embedded route calls authenticate.admin(request) from @shopify/shopify-app-react-router/server, which validates the session token that App Bridge attaches to each request. The app loads inside the Shopify admin, navigates between pages, and all admin pages fetch their data successfully.

I have logged in and interacted with the app on my development store several times since deploying this setup, so session data should be present.

Could someone please manually verify these two checks? Happy to provide any further detail or logs.

Thanks!

Hi @simpll

The team will not see your post.

It is better to post on https://community.shopify.dev/ where the team does respond to dev issues.

Good luck

Thank you so much for your suggestion. I’ll do that.

Laza’s right about moving this to the developer forum. One concrete check may be worth doing before you post there, though.

Open the app embedded in Shopify Admin, then in DevTools > Network filter for:

monorail
produce

Check whether the POST requests to monorail-edge.shopifysvc.com are completing successfully. A Shopify Developer Support Expert suggested this exact telemetry check in a similar case:

If the requests are missing or failing, retry in a clean browser profile with extensions, VPN, and DNS filtering disabled, interact with the app again, and wait for the next check cycle.

If those telemetry requests succeed and the checks remain pending, include that result, the exact submitted app ID, an updated screenshot, and a redacted HAR or short recording in the developer-forum post. I would not reinstall or keep changing the implementation at that point.