I am very sure this is a very silly mistake on my part. I have a working app that has no problem making requests to both the GraphQL and REST APIs, and am adding some calls to the Orders API. I wanted to prototype them in Postman, but have not been able to get any request to work, every request is met with a
“errors”: “[API] Invalid API key or access token (unrecognized login or wrong password)” response.
Following the instructions at https://shopify.dev/tutorials/debug-apps-with-postman-for-mac-os I am using the standard URL format:
https://<API Key>:@.myshopify.com/admin/api/2020-07/shop.json
All my requests are GET requests (shop.json, orders.json, etc) so cookies shouldn’t be an issue though I’ve cleared them in Postman. I’ve also tried the basic auth approach.
These URLs don’t work with Curl either, but the weird part is if I try the URLs in Chrome, they work perfectly and return JSON with all the orders and customer information that shop.json and orders.json are supposed to return.
I’m thinking my mistake is using the wrong password. I’m using my login password and that doesn’t seem right, but its the only password I can find in my account (I’m owner/admin) and it works for the URLs when I use Chrome?