Remix oauth authentication flow

Retired Boards Appdev Authentication
1

I’m creating my own authentication flow with Remix rather than using the Shopify Remix package.

On the server side, oauth works great outside of the iframe and I store the offline token and online session in a database.

On the client side, as soon as I load App Bridge 4 with the line below, the app immediately redirects to the admin and reloads the app - which starts the oauth flow all over again because I cannot identify the user session.

<script src="https://cdn.shopify.com/shopifycloud/app-bridge.js" data-api-key={apiKey} />

What can I do to pass the online user session that is created outside of the iframe to the page that is reloaded embedded inside the admin?

Cookies are not available and the JWT is not immediately available.

Thanks in advance.

1 Like
2

You can generate session token on remix app using app-bridge, and send this sessionToken to your request on backend, where to verify signature, you can use, shopify’s package

3

could you please tell me like, how can I implement it. if you have any references to it, can you please share it. I’m unable to understand the documentation.