Hey @TsaNooz ,
Just looking over our documentation here, this would be expected behaviour depending on the customers authentication status.
To ensure the security of customer information when accessing the order status page from an email or SMS order notification, a login requirement is enforced depending on how and when the customer accesses the order status page. Customers can access their order status page from their order confirmation email for 3 weeks without logging in, when using the same browser. When using different browsers, customers can access their order status page for 2 weeks without logging in, across a maximum of 5 different browsers.> > When logging in is required, customers need to either log in to their customer account or provide two credentials to access the page:> > - The order number (which can be retrieved from their order confirmation email or SMS receipt)> - The email address or phone number used during checkout
This document here also goes in to more detail on the different order status page authentication states and expectations when directing customers there through your app:
https://shopify.dev/docs/apps/build/customer-accounts/order-status-page#authentication-states
This is the changelog post here from when this requirement changed: https://shopify.dev/changelog/level-2-protected-customer-data-requirements-are-now-needed-to-access-the-order-statuspageurl-field
Hope that helps,
- Kyle G.