Any method I’ve attempted to request information from a Shopify store from a different domain results in the familiar CORS error: “Access to fetch at ‘ https://x.myshopify.com/admin/api/2019-04/graphql.json ’ from origin ‘ https://x.ngrok.io ’ has been blocked by CORS policy: Response to preflight requ…

If you want to make an API request to the admin API, you have to do it from a back end. Front end requests, as you observed, will be blocked by the CORS policy on our end. What you can do is from your front end, delegate to your backend to make the request, and return the response data from that req…

The flow is fairly simple but refer to the docs for extra info on authentication. You should never be trying to access the Admin API from the front end as it’s not secure. You will be passing auth details that anyone could steal so this is just a crazy idea. General delegation (high level): You’…

Hi Jason, Thank you for quick reply, what I am using is an GraphQL Admin API. This is my sample query var query = { productVariants(first:1, query:"barcode:${sku}") { edges { node { inventoryQuantity legacyResourceId barcode price compareAtPrice availableForSale } } } }; $.ajax( { url: ‘ https:/…

we are currently facing this issue in our store, can you show us how to implement it ???

Can you show me your code? PS: don’t show the real api password or any private details

This is not solved. What about the Storefront API. Does that require a backend too? I literally can’t get a straight answer out of this forum because every question is about a different kind of API. Public, private, custom. Dudes. Make better docs.

Think of it this way: Storefront API is a public API and the token for it is meant to be used on the client side. Admin API is a private API and the token is not meant to be shared publicly. If you share this token to everyone by making requests from the browser, they can potentially access privat…

It doesn’t clear up the issue because it doesn’t answer my question. It only reitterates other docs. The question is Does Storefront API actually work Client-Side or are there unavoidable CORS issues that require a server-side proxy? I’m not talking about the difference between Storefront and Admi…

Hence, Shopify throws a CORS error when detecting that you use a browser to send a request to a private API. This is the answer to your question based on my comment. Storefront API is a public API and Admin API is a private one. That’s exactly why the difference between the APIs was pointed out. …

Hi Nester, My questions are very related to the topic at hand and, although I’m pretty sure it’s a few very tiny things that I’m missing, I too am struggling for answers. My situation is simple: I have an Express server (Node) that can authenticate and call the Shopify admin API without problems w…

Using APIs from a different origin/domain

Retired Boards Appdev Store Design

I_KNOW_NOTHING November 18, 2019, 1:54am 3

Hi,

Can you please explain more how to achieve this delegation from Frontend to Backend?

regards

Topic		Replies	Views
CORS POLICY ERROR for 'X-Shopify-Access-Token' Authentication troubleshooting	3	214	July 7, 2023
I connect my domain and my Rest API call dosen't work Store Design	2	122	April 15, 2021
Blocked by CORS policy: Response to preflight request doesn't pass access control check: No 'Access- Store Design	4	645	August 19, 2020
API ERROR Fetch Metafields	10	291	July 6, 2022
Problem using the admin api to fetch the data in front-end Shopify Discussion apps	0	34	September 17, 2021

Using APIs from a different origin/domain

Related topics