Authentication & Access

Topic	Replies	Views	Activity
Action required: existing public apps must use expiring offline access tokens by January 1, 2027 oauth We’re updating how public apps handle offline access tokens to better protect merchant data. By January 1, 2027, all public apps — including those created before April 1, 2026 — must use expiring offline access tokens wh…	10	521	June 11, 2026
Welcome to the Authentication & Access Board! oauth , access-scopes Hello Shopify Developers! Welcome to the Authentication board! This space is dedicated to all things related to authenticating your Shopify apps and ensuring secure interactions with Shopify’s APIs. Whether you’re setti…	0	408	August 8, 2024
Some utility functions that may help after migrating to expiring tokens oauth	1	21	June 26, 2026
Migrating from non expiring to expiring access tokens oauth	41	1365	June 25, 2026
shopifyqlQuery returns "Access denied" despite read_analytics scope, read_reports scope and PCD approved — aggregate sales metrics only oauth , access-scopes	2	24	June 24, 2026
How to add client to new dev store? access-scopes	2	41	June 24, 2026
Enable Protected Customer Data access for a custom app created in the Dev Dashboard (no UI option available) oauth , access-scopes	1	35	June 23, 2026
Theme API / Asset API access for multiple environments in Public App development access-scopes	1	63	June 23, 2026
Too many Requests. Try again later on first try in partner account access-scopes	0	22	June 19, 2026
write_themes exemption — no confirmation received, unlisted app, App Store URL required? oauth , access-scopes	1	31	June 18, 2026
OAuth issues a valid token for a deactivated store, but all Admin API calls return 404 — app shows false "connected" oauth	1	25	June 18, 2026
520 during refresh_token rotation permanently orphans the offline access token oauth	4	278	June 16, 2026
After migrating to expiring access tokens, do I need to write a scheduled task to continuously obtain a valid access token if I have multiple services that need to use it? oauth	1	58	June 14, 2026
Issues integrating Shopify OAuth in our app — receiving 403 Forbidden during authorization oauth	3	221	June 10, 2026
What to do when refresh token is dead on the back oauth	6	109	June 10, 2026
<shopify-account> lowercases locale region subtag in auth redirect, breaking hosted Customer Account page language oauth	3	58	June 10, 2026
Issue- themeFilesUpsert returns ACCESS_DENIED despite write_themes scope and approved exemption access-scopes	2	63	June 10, 2026
Feature Request: Pass ui_locales to external OIDC identity provider in New Customer Accounts oauth	3	116	June 9, 2026
Identity provider OAuth2 token auth merhods questions oauth	1	27	June 8, 2026
Microphone access in embedded apps oauth , access-scopes	5	72	June 4, 2026
Update scope prompt not working according to docs access-scopes	7	205	June 4, 2026
Dev account cannot access personal information any longer access-scopes	5	131	June 3, 2026
Client credentials rotation with expiring offline tokens oauth	1	56	June 2, 2026
Bug Report: Cannot Request Protected Customer Data Access in New Dev Dashboard oauth , access-scopes	15	838	June 2, 2026
Allow requesting "Companies" perms for collaborator access access-scopes	16	187	June 1, 2026
API Token Error after following documentation oauth	1	35	May 28, 2026
Transition from non-expiring access token to expiring access token oauth	1	67	May 27, 2026
Urgent: 401 Error on refreshing accessToken oauth	2	68	May 25, 2026
Orders/Create webhook customer data is redacted even after Protected Customer Data approval access-scopes	2	50	May 23, 2026
Stores granted access not showing in store list, can't send new requests either access-scopes	1	52	May 21, 2026

Action required: existing public apps must use expiring offline access tokens by January 1, 2027

oauth

We’re updating how public apps handle offline access tokens to better protect merchant data. By January 1, 2027, all public apps — including those created before April 1, 2026 — must use expiring offline access tokens wh…

10

521

June 11, 2026

Welcome to the Authentication & Access Board!

oauth , access-scopes

Hello Shopify Developers! Welcome to the Authentication board! This space is dedicated to all things related to authenticating your Shopify apps and ensuring secure interactions with Shopify’s APIs. Whether you’re setti…