Storefront intermittent forbidden with OK user

Retired Boards Appdev Custom Storefronts
1

We’ve had an application in production since about this summer, where we’ve always been on the April-24 version of the Storefront API.

It has worked without hiccups, until approximately this month. First we started seeing most attempts to authenticate most of the time, now we’re seeing maybe 10% of requests on average failing.

{
 "networkStatusCode":403,
 "message":"GraphQL Client: Forbidden",
 "response":{}
}

Is the result of

mutation customerAccessTokenCreate($input: CustomerAccessTokenCreateInput!) {
  customerAccessTokenCreate(input: $input) {
   customerAccessToken {
    accessToken
    expiresAt
  }
  customerUserErrors {
   code
   field
   message
  }
 }
}

input is an object

{
 email,
 password
}

A failure to authenticate would be OK if consistent, however, the results we’re seeing are not. We’re not sure why.

We are connecting to the Storefront API via a delegated access token.

I would appreciate some help in understanding the problem.

2

Hi @martinkleiven

October 2024 version is out. Have you tried updating?

3

The prior version should not be affected by the release of an new one; if this is the solution, it would be a bug from Shopify.