Customer Account API authentification

Extensions
1

Hello,

I am trying to build a full page customer account extension with a form for a bit personalization for the customer.
But here I run into a couple of problems, do I have to use customer account API to get customer information and send it back and if yes, how do I authenticate my app on it?

What about a customer account inline extension?

All the help is very appreciated,
I am very lost.

3

Hi @Mykolas_Kunevicius

Yes, you’ll have to use the Customer Account API to retrieve details about the customer.

Thankfully, Shopify has made it simple to retrieve this information without using your own API to protect the merchant’s access token.

You can simply call fetch with your Customer Account API query. Here’s an example: Customer Account API

4

@Dylan is 100% right here, just adding two points of clarification:

  • When using fetch with the shopify://customer-account/api/2025-07/graphql.json protocol, we’ll automatically pass the token on behalf of your app, so no need to worry about authenticating against the API.
  • On the order status page, if the customer is just pre-authenticated (but not authenticated), your app is only authorized to query data about the order the customer is looking at. If you need other data or you need to take an action, you’ll need to authenticate customers using the requireLogin API. Make sure to only use it as a result of user interaction with your extension (e.g. a button click)
2 Likes
5

What about a full page extension? Would I need to use the requireLogin api call still?

6

No, customers are guaranteed to always be authenticated on full page extension!

1 Like