We’ve built a Shopify App extension but need some help with hiding the Graphql storefront access token on the frontend. We believe we need to use a Proxy URL but we’re not getting anywhere with it! Can anyone help with this please?
Thank you!
Topic summary
-
Main issue: Need a way to hide the Shopify Storefront GraphQL access token in the frontend of a Shopify App extension.
-
Current attempt: Considering use of a Proxy URL to avoid exposing the token client-side but unable to get it working.
-
Context: Custom Storefronts setup; concern is preventing the Storefront API access token from being visible in browser code while still enabling Storefront GraphQL requests.
-
Key terms:
- Storefront access token: credential used to authenticate requests to the Storefront API (GraphQL).
- Proxy URL: a server-side endpoint that forwards requests to Shopify, keeping the token secret from the client.
-
Status: No solutions or steps provided yet; the thread is a help request and remains open/unresolved.