Hide Graphql Access Token on Frontend of Extension App

Topic summary

  • Main issue: Need to hide a GraphQL Storefront access token on the frontend of a Shopify App extension.
  • Attempt so far: Considering using a Proxy URL but implementation is not working or unclear.
  • Request/Status: Seeking guidance or best practices; no solutions or follow-ups yet. Discussion remains open.
Summarized with AI on December 22. AI used: gpt-5.

We’ve built a Shopify App extension but need some help with hiding the Graphql storefront access token on the frontend. We believe we need to use a Proxy URL but we’re not getting anywhere with it! Can anyone help with this please?Thank you!