A merchant’s store that is using a non-block theme is seeing a 403 status code when our app’s script tag is attempted to being loaded. The script tag is configured as follows. The script url is loading correctly from our servers. script tags with scope “order_status”are deprecated but the scope “online_store” should still work.
Thanks for flagging this. I’ve looked into it and the script setup itself is fine — the online_store scope still works and isn’t deprecated.
When this happens, it’s usually not the theme. What’s happening is that Shopify loads app scripts anonymously on the storefront, and if the app’s server has any firewall or security rules (Cloudflare, bot protection, referrer checks, etc.), it can block that request and throw a 403 — even though the script opens fine when you visit the URL directly.
I’m checking the server side now to make sure nothing is blocking Shopify’s storefront requests. Once that’s adjusted, the script should load normally.
I checked the Loopz gift card page directly. The product page itself is loading fine, nothing looks broken on the front end.
What’s actually happening is that the script from our app isn’t loading on that page. From our logs, the store stopped requesting the script around Feb 3rd at about 11am CT, which lines up with when you started seeing the issue.
So it’s not the product page or the gift card setup itself, it looks like something changed around that time that’s preventing the script from being loaded (theme publish, app change, security/firewall setting, etc.).
If you can think of anything that was updated around then, that should point us in the right direction and we can get it sorted pretty quickly.
I worked with Shopify partner support and they fixed the issue on their end. It seemed to have been related to the Content-Type not correctly being recorded. All good now.