With the strong focus on privacy, browsers have recently started phasing out support for the 3rd party cookie. This has caused issues for embedded apps which until now have required the use of 3rd party cookies. Our new App Bridge auth beta introduces “session tokens” to empower developers to creat…

Unfortunately since the subsequent request come from your own website, they won’t have any of the HMAC stuff.

@BGilbert I’ll message you privately so as not to clutter up this thread!

Hi! This looks like a mistake in our documentation. The getSessionToken utility takes the app as its argument. We’ll update the docs, thanks for reporting!

@dsingh replying to your “Considering that now there is no need for use of cookies. Is there a way to retrieve the myshopify.com domain an embedded app is loaded in? That is probably the last part which is needed before embedded apps can be truly cookie-less.” question: The domain is passed as a qu…

Can Shopify provide better support for Python / Django? I find it hard to implment the new authentication on my own. Now, I can only render a page with App Bridge setup. When I clicked Test app on development store => select my development store, it shows My test page with App Bridge under my URL…

So if I’m understanding correctly, the jwt token replaces the old access_token? Instead of X-Shopify-Storefront-Access-Token as the header name and the access_token as the value, you send Authorization: Bearer [JWT HERE] to Shopify instead? I can’t use a react app or rails app on this project so th…

Hi @Adriano_Corte_R After struggling for several hours, I found that there was a line from the doc : If your app doesn’t have a shop token for the shop, then the route should respond with a redirect to send the user to the OAuth login flow. This ensures that the app is installed and receives its s…

@jam_chan So the backend first checks for the presence of a session token (or maybe it should check for a shop or hmac query param?), and if not redirects the user to the oauth permissions URL, correct? The user then grants permissions and gets redirected to your callback URL. This callback URL lo…

Introducing cookieless authentication beta with App Bridge

Retired Boards Appdev Tools

dsingh September 19, 2020, 7:02pm 71

Yes, I figured out that was happening. Issue was on my end. My CustomRouter wasn’t using the bridge properly. I realized that after posting.

Topic		Replies	Views
Video tutorial on using JWT session tokens to authenticate your embedded app Authentication	14	414	February 27, 2024
Authenticated fetch for new cookie policy error Graphql Basics And Troubleshooting	24	354	June 9, 2021
Shopify App Bridge Requirement Tools	3	143	February 22, 2022
session tokens and not rely on 3rd party cookies to function properly. Shopify Apps third-party-apps , shopify-apps	1	61	October 16, 2024
Shopify App Gets Caught in Infinite 'Enable Cookies' loop in Safari Authentication	79	1125	February 9, 2023

Introducing cookieless authentication beta with App Bridge

Related topics