Handling Shopify App Scope Changes with Webhooks
Shopify apps rely on API scopes to determine which resources and operations they can access. As an app evolves, its requested permissions may change, and a merchant may grant a different set of scopes
#shopify#shopify-store#shopify-development#shopify-web-development-company#shopify-plus#shopify-apps#shopify-app-development#shopify-store-development#shopify-subscription-app#shopify-expert#webhooks#api#apis#backend-development#javascript
Responses
Markdown supported · ⌘↵ to post
Ethan Moore
The point that a handler alone doesn't mean Shopify will ever call it is the one that bites people most. A small tip: after each deploy, log the active webhook subscriptions (or query them via the Admin API) and compare against what the app expects, so a missing scopes_update topic fails loudly instead of leaving sessions stale. Do you also guard against out-of-order deliveries when updating the session scope?