Hi folks we are using the shopify draft order api
- Seeing some issues here -
When we create a draft order we pass a contact email and shipping address
What happens when we share the invoice URL - it shows as though the person is logged in even in the incognito window. It also shows other address attached to that user - maybe a security risk.
Is this a bug?