With the strong focus on privacy, browsers have recently started phasing out support for the 3rd party cookie. This has caused issues for embedded apps which until now have required the use of 3rd party cookies. Our new App Bridge auth beta introduces “session tokens” to empower developers to creat…

Thanks for the suggestion, Adam! We’re still figuring out the best way for us to surface the backend logic for node. The good news is that most of the logic lives in App Bridge, and you can use the authenticatedFetch fetch implementation with pretty much any modern JS framework (see more about auth…

Hi @Liam How does this relate to embedded Shopify POS authentication? I am currently servicing an ongoing issue with many users of my Shopify POS embedded app on iPad’s where our cookie based authentication is throwing users into an endless “accept-cookie” loop. ( testing on a tablet with iOS 12.8…

Has anyone built an App with this pattern? I have gone through all the example code published so far and honestly, it looks nightmarish. I can understand from the high level that if you take a stripped down diagram of the world of request/response, you can use the JWT as a way to say this request is…

Thanks Dave, this is really good feedback. I think you’ve identified a few things we can do better: Looking through this code. Wow. There are like 120 lines of code now so intermingled with cookies and validation and access and … I agree 100% with this. The new JWT code in shopify_app is actuall…

any chance JWT will be implemented into shopify-cli? currently when you build project with node.js + react, it still use cookies

Hi @Indinuity ! Thanks for bringing this up with us. The POS channel team is aware of this and is working on converting over the app to the new authentication flow. Once that is out there, it should alleviate the issue users are seeing.

I’ve been asking 100 people on this forum for help, finally found your post. To give you some context, I have a shopify application, backend Koa (auth done with koa-shopify-auth), frontend React, currently I’m using cookies to set shopOrigin in order to configure the App Bridge Provider. On Safari …

Hi, good question! Whenever Shopify loads your app in the embedded context, the app URL contains several URL parameters, including a shop parameter that is the shop origin. You can use this shop parameter to load up App Bridge. Does that make sense?

Yep, even tho it’s a bit tricky. I’ve created a function in in index.html to get that shop param, and i taught that it would work now without cookies but it seems like during the authorization (using koa-shopify-auth) at some point i need the shop param before i have that URL that contains state an…

Introducing cookieless authentication beta with App Bridge

Retired Boards Appdev Tools

Adam_Hurlburt July 30, 2020, 7:44pm 2

Will koa-shopify-auth package be updated to leverage this?

I see in the resources a sample ruby app was provided, would be nice to see some examples for some of the other supported languages (like react / node examples).

Topic		Replies	Views
Video tutorial on using JWT session tokens to authenticate your embedded app Authentication	14	398	February 27, 2024
Authenticated fetch for new cookie policy error Graphql Basics And Troubleshooting	24	321	June 9, 2021
Shopify App Bridge Requirement Tools	3	143	February 22, 2022
session tokens and not rely on 3rd party cookies to function properly. Shopify Apps third-party-apps , shopify-apps	1	61	October 16, 2024
Shopify App Gets Caught in Infinite 'Enable Cookies' loop in Safari Authentication	79	1038	February 9, 2023

Introducing cookieless authentication beta with App Bridge

Related topics