StoreFrontAPI access using delegateAccessToken and Shopify-Storefront-Buyer-IP

I am trying to get authenticated access to the StoreFrontAPI using delegateAccessToken and Shopify-Storefront-Buyer-IP.

I have two questions.

  • Is it correct to assume that a delegateAccessToken created using delegateAccessTokenCreate (Graph QL Admin API) is indefinite unless expiresIn is specified? I could not find the answer in the documentation.
  • Is there any way to verify that the Shopify-Storefront-Buyer-IP is working? I am afraid that we can only check it in a high load environment that is equivalent to a production environment.

Hey @Masanori - Thanks for your post!

The delegateAccessToken would expire based on the parent if you don’t set a value for this unless the Parent has offline access. You can read more about it on this developer document on the Delegate Access Token

The Storefront buyer IP but it is subject to rate limiting that you can refer to on this rate limit page.