With the strong focus on privacy, browsers have recently started phasing out support for the 3rd party cookie. This has caused issues for embedded apps which until now have required the use of 3rd party cookies. Our new App Bridge auth beta introduces “session tokens” to empower developers to creat…

We’re aiming to bring it out of beta end of September/early October. First we’re following up on some of the feedback from this thread and other venues to make sure this is something developers feel comfortable adopting :slightly_smiling_face: If it’s working for you, feel free to use it in product…

@Michael_Ragalie yeah it’s pretty solid already honestly, I have it running in production with my app. The only issue I really have is you guys need to do some better documentation for app bridge in general. I wanted to know more about the new app bridge utils involving this new auth method, but I h…

I was able to able to get this running in production as well using the info that @KisukaKiza posted on this thread along with the docs. I did end up taking the koa-shopify-auth and graphqlproxy packages and stripped them of cookie cruft, and consolidated a few things. One of the things that would b…

Thanks for the feedback! We published some documentation on how the helpers work so you don’t have to dig into node_modules to use them :slightly_smiling_face: https://shopify.dev/tools/app-bridge/authentication#using-session-token-helpers-directly

Is it possible to use this in the old Embedded App SDK?

This is only available via App Bridge. Another reason to upgrade! :slightly_smiling_face:

I’m coming late to this thread, but only because my app was just rejected due to, ostensibly, a cookies issue ( https://community.shopify.com/c/Shopify-APIs-SDKs/App-Rejected-shopify-app-gem-In-Shopify-POS-we-were-met-with/m-p/874578#M55941 ). I have another app live in the app store where I did the …

The problem is how are your REST API calls authenticated?

Hi @BGilbert thanks for the quick response - not sure if this is answering your question specifically, but I do this: Request comes in through my app - validate hostname and hmac validity. If it passes, they can proceed to the actual app At that point, during the app session the user can perform c…

Unfortunately with what explained, anyone can just call the REST API calls easily to manipulate other shops by just knowing the other shops .myshopify.com URL Unrelated to the above, I’m trying to use the ES5 AppBridge but my call to getSessionToken throws an error: Uncaught (in…

Introducing cookieless authentication beta with App Bridge

Retired Boards Appdev Tools

Michael_Ragalie September 3, 2020, 12:31pm 60

This is only available via App Bridge. Another reason to upgrade!

Topic		Replies	Views
Video tutorial on using JWT session tokens to authenticate your embedded app Authentication	14	461	February 27, 2024
Authenticated fetch for new cookie policy error Graphql Basics And Troubleshooting	24	454	June 9, 2021
Shopify App Bridge Requirement Tools	3	149	February 22, 2022
session tokens and not rely on 3rd party cookies to function properly. Shopify Apps third-party-apps , shopify-apps	1	70	October 16, 2024
Shopify App Gets Caught in Infinite 'Enable Cookies' loop in Safari Authentication	79	1286	February 9, 2023

Introducing cookieless authentication beta with App Bridge

Related topics