Shopify Developer Community Forums

Topic	Replies	Views	Activity
App security updates: IP allowlist is now required App Security On Oct 27 we recommended the IP allowlist. It is now required for every public app by November 20, or November 12 if you use bulk ops. An IP allowlist means a leaked token can’t be used anywhere but your own servers. Wit…	28	1005	November 13, 2026
How Can Shopify Stop App Store Spam and Unfair Competition? Shopify App Store app-store	47	1062	November 15, 2026
Missing Apple Sign In in, it is required when also using facebook or google login Hydrogen and Storefront APIs customer-account-api	13	431	November 15, 2026
Shopify Sidekick App Recommendations – A Nightmare for Developers Outside the Top 3? Shopify App Store app-store	83	1661	November 15, 2026
Review processes for Admin - Export data & Theme zip download behaviour Uncategorized	2	35	November 15, 2026
Feature request: Add loading support to s-admin-block Polaris extensions	0	10	November 15, 2026
How do you handle long running task in node based apps? Community Feedback	7	148	November 15, 2026
Shopify CLI repeatedly requires identity verification during shopify theme dev, blocking development and AI agents Online Store and Theme Development theme-troubleshootin	2	41	November 15, 2026
Unable to start Theme Dev Server Shopify CLI and Libraries theme-commands	1	22	November 15, 2026
Are Partner Directory leads the same as before, or have they dropped since the new directory? Community Feedback	1	25	November 15, 2026
Non Compliant 1 Star Review, 8 months active Shopify App Store app-store	2	37	November 15, 2026
Shopify’s new rules clean up App Store spam, finally addressing the store’s biggest problem Shopify App Store app-store	6	98	November 15, 2026
Follow-up on our crawler registration: ProductGale (Web Bot Auth) Online Store and Theme Development performance	3	51	November 15, 2026
Optics in Agentic Commerce Agentic Commerce	2	47	November 14, 2026
Market-driven shipping is now in feature preview — action may be required for your app Fulfillment & Inventory fulfillment-services	85	2336	November 14, 2026
Token Expiry FAQ Authentication & Access oauth	21	862	November 14, 2026
[FEATURE REQUEST] Web Crypto unavailable in POS UI Extensions (iOS & Android) and admin UI extensions Extensions pos-extensions	3	111	November 14, 2026
Can't access merchant Dev Dashboard as collaborator Dev Platform dev-dashboard	12	712	November 14, 2026
Update: Token expiry opt-in Authentication & Access oauth	4	74	November 14, 2026
Default market not respected by shopify theme dev Online Store and Theme Development theme-troubleshootin	3	33	November 14, 2026
Collaborators can “Develop apps” but can’t see the merchant’s Dev Dashboard. Agencies that avoid lock-in are left without logs, errors or metrics App Security	0	15	November 14, 2026
S-table-row clickDelegate does nothing inside s-modal Polaris	0	13	November 14, 2026
Polaris 2.0 RC is great, but we still can't match the admin's index table Polaris web-components	11	498	November 14, 2026
How to trigger emails? Shopify Flow tasks , automation	3	229	November 14, 2026
Feature Request: Allow configuring both Networks (ASN) and IP Addresses in App Allowlist simultaneously App Security new-gql-apis	3	57	November 14, 2026
App Proxy intermittently fails ("There was an error in the third-party application") and requests are never forwarded to the origin App Security	3	47	November 13, 2026
`insertBefore` in the customer account extension runtime leaves `nextSibling` stale, so Preact lists stop updating Extensions customer-account-ext	3	37	November 13, 2026
Any way to force users from /checkout to /cart? Functions general-functions	3	39	November 13, 2026
Migrating from non expiring to expiring access tokens Authentication & Access oauth	227	7544	November 13, 2026
A rollouts request Uncategorized	2	36	November 13, 2026

App security updates: IP allowlist is now required

On Oct 27 we recommended the IP allowlist. It is now required for every public app by November 20, or November 12 if you use bulk ops. An IP allowlist means a leaked token can’t be used anywhere but your own servers. Wit…