Bug: Double Requests from Shopify Admin iFrame Issue

Authentication & Access
1

I just discovered an issue that has been affecting my apps since mid march.

I isolated the issue to merchants entering our embedded apps using BROWSERS (iframe). Shopify sends 2 identical requests to the server - the timestamps in the requests themselves are IDENTICAL. Paste of nginx records below.

  1. This does NOT happen when entering from the mobile app (which means there is something that its doing differently than the iframe version),

  2. And it does not happen when entering directly on my development server (which means my server isn’t likely to be the issue).

These facts point to some potential issue with the iFrame setup in the Shopify web admin. After the initial entry, it does not duplicate any subsequent calls.

Can anyone else confirm this in their server logs? Is there some configuration somewhere I don’t have setup correctly maybe?

Only respond to this post if you work for Shopify or have manually verified your server logs when entering your app via Shopify Mobile App vs. Shopify Web Admin. Thank you

2025/04/14 16:38:58 [error] 2984549#2984549: *3957981 FastCGI sent in stderr: “PHP message: ENTRY” while reading response header from upstream, client: 187.246.19.27, server: seoking.engageify.com, request: “GET /dashboard?embedded=1&hmac=68cbafe554486f8aede07d89dc52937c6341195a6456a592f4819ae1bdddc408&host=YWRtaW4uc2hvcGlmeS5jb20vc3RvcmUvbW90by1yYWQtY29t&id_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczpcL1wvbW90by1yYWQtY29tLm15c2hvcGlmeS5jb21cL2FkbWluIiwiZGVzdCI6Imh0dHBzOlwvXC9tb3RvLXJhZC1jb20ubXlzaG9waWZ5LmNvbSIsImF1ZCI6ImY0YTJhOWQyMjM3ZDZmOWIyODllOWU0MjdmNmUzZDgyIiwic3ViIjoiODk0ODM1NDI3NDgiLCJleHAiOjE3NDQ2NDg3OTcsIm5iZiI6MTc0NDY0ODczNywiaWF0IjoxNzQ0NjQ4NzM3LCJqdGkiOiI1YWU4YjMyZi04NjdiLTRmZDQtOTEwZC03ZmJmNjI4ZDY4OTUiLCJzaWQiOiI1NTM4MGQ2OC02NGQ3LTRhN2QtYWEwNy0xOTk5Y2ZmZGI0NjciLCJzaWciOiJjNzMzZGY3OWNkOWRmNDVlNDIxZmU1YmZjYjg2OTQwYmFiMzMwYjJiZDVhOTQyZGFlOTFiYWZkNGM2MzU1MmM4In0.lc2XWhKP6rs_ztCb1rydA4dYuOrUwnrV__AdL3sN3bk&locale=es-MX&session=bf5ade7bbb94c405e073d98eba1bd164d3e74edababa5325245e0cdd625f1c91&shop=moto-…myshopify.com&timestamp=1744648737 HTTP/2.0”, upstream: “fastcgi://unix:/var/run/php/php8.1-fpm.sock:”, host: "seoking.

2025/04/14 16:38:59 [error] 2984549#2984549: *3957981 FastCGI sent in stderr: “PHP message: ENTRY” while reading response header from upstream, client: 187.246.19.27, server: seoking.engageify.com, request: “GET /dashboard?embedded=1&hmac=68cbafe554486f8aede07d89dc52937c6341195a6456a592f4819ae1bdddc408&host=YWRtaW4uc2hvcGlmeS5jb20vc3RvcmUvbW90by1yYWQtY29t&id_token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJpc3MiOiJodHRwczpcL1wvbW90by1yYWQtY29tLm15c2hvcGlmeS5jb21cL2FkbWluIiwiZGVzdCI6Imh0dHBzOlwvXC9tb3RvLXJhZC1jb20ubXlzaG9waWZ5LmNvbSIsImF1ZCI6ImY0YTJhOWQyMjM3ZDZmOWIyODllOWU0MjdmNmUzZDgyIiwic3ViIjoiODk0ODM1NDI3NDgiLCJleHAiOjE3NDQ2NDg3OTcsIm5iZiI6MTc0NDY0ODczNywiaWF0IjoxNzQ0NjQ4NzM3LCJqdGkiOiI1YWU4YjMyZi04NjdiLTRmZDQtOTEwZC03ZmJmNjI4ZDY4OTUiLCJzaWQiOiI1NTM4MGQ2OC02NGQ3LTRhN2QtYWEwNy0xOTk5Y2ZmZGI0NjciLCJzaWciOiJjNzMzZGY3OWNkOWRmNDVlNDIxZmU1YmZjYjg2OTQwYmFiMzMwYjJiZDVhOTQyZGFlOTFiYWZkNGM2MzU1MmM4In0.lc2XWhKP6rs_ztCb1rydA4dYuOrUwnrV__AdL3sN3bk&locale=es-MX&session=bf5ade7bbb94c405e073d98eba1bd164d3e74edababa5325245e0cdd625f1c91&shop=moto-…myshopify.com&timestamp=1744648737 HTTP/2.0”, upstream: “fastcgi://unix:/var/run/php/php8.1-fpm.sock:”, host: "seoking.