How to get access to the new Storefront API?

Retired Boards Appdev Custom Storefronts
1

I am trying to play around with the Storefront API that was announced last week at the Shopify Unite conference.

Using the traditional Shopify API in my toy app, when I do:

ShopifyAPI::StorefrontAccessToken.create(title: 'test')

I get this error:

ActiveResource::ForbiddenAccess: Failed.  Response code = 403.  Response message = Forbidden.

Do I need to change a setting in my app, or to request a special access? It is not mentioned in the documentation how to get any authorization.

2 Likes
2

Hi Jerome

If you go to this page https://help.shopify.com/api/storefront-api/getting-started#accessing-the-storefront-graphql-endpoint and then under the “obtaining a storefront access token” I think you will just have to edit your current app to have the below.

In the Custom Storefront section, be sure to select Allow this app to access data from your storefront.

Hope that helps

Joe

3

Hi Joe,

That would work for a private app. For my use case though, I am trying to work on a public app. :slight_smile:

The “Obtaining a Storefront Access Token” section that you point out has two sets of instructions, one for private apps, with the instructions you gave me above.

The other set of instructions are toggled when I click on the “Via the REST API” button, which I assume is for public apps:

  1. Make sure you have the credentials necessary to make authenticated requests to the Shopify API.> 1. Create your Storefront Access Token as described in the reference here.

When I try to create the token, I get the error mentioned in my original post.

1 Like
4

Similar issue. Any luck?

5

Same issue here also. Any information? I think this API belongs to sales channel SDK.

1 Like
6

im having the same issue

1 Like
7

I’m encountering the same issue, any solution yet?

1 Like
8

Hey all,

In order to successfully create a Storefront Access Token, your application must request one of the following scopes during OAuth:

  • unauthenticated_read_product_listings
  • unauthenticated_read_collection_listings
  • unauthenticated_write_checkouts
  • unauthenticated_write_customers

The Storefront Access Token will inherit any unauthenticated scopes from the access token that was used to created it.

An unauthenticated scope represents a level of access appropriate for an unauthenticated user, such as a customer on a storefront.

If you attempt to request a Storefront Access Token without having such a scope, you’ll currently receive a 403 Forbidden error response.

Hope this helps to clear things up.

2 Likes
9

Thanks for your help, your solution worked. I didn’t realize that those scopes had been added to the regular scopes, I imagined they would only be available for the acces token.

However, after I got my access token, I can’t use it to request information from GraphQL. Whenever I try to use it, I get a Bad request with the error message SyntaxError: Unexpected token < in JSON at position 1. When I use the token available in the specific store settings, I can get results with the same query. Any help on that?

1 Like
10

@Jamie_D_1 thanks for providing some ways to troubleshoot creating Storefront Access Tokens, I have a public app in testing and I’ve tried including all of the unauthenticated access scopes but still am receiving a 401 on the storefront_access_token.json creation endpoint.

I’ve also tried turning my app into a sales channel and vice versa. Are storefront access tokens only available to private apps?

https://community.shopify.com/c/Shopify-APIs-SDKs/Clarification-on-rules-for-creating-Storefront-Access-Tokens/m-p/483526?advanced=false&collapse_discussion=true&filter=location&location=category:en&q=storefront%20access%20token&search_type=thread

2 Likes
11

Hi Dylan..

I am facing the same issue.. How did you solve it?

Thanks in advance for any help..

Best

12

i have the same problem !!

converted to sales channel then provided unauthenticated scopes to the app then reinstalled

after that creating storefront access token still get403 error

1 Like