Multipass return_to domain/CORS. Custom store, JS Buy SDK checkout URL, Multipass/redirect

Looking for more in-depth documentation for Multipass and the return_to property. If I am on a custom store domain, “abc.com”, and make a request to “Loading...”…with the generated token, what are the requirements for the “return_to” value;? Can it be to the checkout URL for Shopify hosted checkout that we generated using the JS Buy SDK with a domain of “shop.abc.com”?

Can I send all parameters with my Multipass request and should I expect it to work with the return_to checkout?

For a while I was (maybe still am) getting a dev console lit up with CORS errors after passing a return_to URL to multipass. When it’s working properly and the user is automatically logged in, it looks like the preflights are full of headers to prevent cross site errors, but when it doesn’t work it’s a different story, obviously, but I want to know what is happening behind the scenes.

2 Likes