We are developing a public app for Shopify App Store. The app has a page that is loaded embedded in a Store admin page to allow the merchant to make use of its functionality as well as theme extensions to allow for new functionality on the merchant’s online store.
To protect the app backend from non authorized use, is there a way for it to obtain a list of valid domains of the merchant’s online store?. Can this be done though API or by asking the merchant explicitly about them?
