So if I’m understanding correctly, the jwt token replaces the old access_token? Instead of X-Shopify-Storefront-Access-Token as the header name and the access_token as the value, you send Authorization: Bearer [JWT HERE] to Shopify instead?
I can’t use a react app or rails app on this project so the shopify provided examples aren’t doing me much good. Plus I’m not a ruby dev and the code looks like a bunch of undocumented magic to me. My backend is a Golang app and my frontend is framework-less, bundled through webpack. Might throw VueJs in there eventually.
How is the app install process supposed to work now? Does app-bridge handle that…?
I really wish the docs had a step-by-step guide.
I’m not understanding what is now the job of the backend vs the frontend and what I’m supposed to do with the token that getSessionToken(window.app) returns. Should I be saving that somewhere like my db? Or in a session? If app-bridge is responsible for everything now, how is my frontend supposed to know that the app is already installed? How does app-bridge redirect to the install/permissions URL? What’s my /auth/login/callback route supposed to do? Re-init app-bridge somehow and do [something] with it?
A step-by-step guide in the docs of what your backend and frontend should be individually responsible for and how would be amazing. Right now I’m having to make a whooooole lot of assumptions.