Customer Account Extension API missing keys in session token

When following this guide: Session Token

I keep getting an error because the Shopify Ruby API is expecting there to be keys for “iss” and “sid”. I checked the Shopify JS API, and it also expects the “iss” and “sid” keys. Here is where it uses the session tokens: shopify-api-ruby/lib/shopify_api/auth/jwt_payload.rb at main · Shopify/shopify-api-ruby · GitHub

Am I using this session token incorrectly? The Shopify App library for Ruby automatically tries to verify that token and is failing.

Hey @DIW :wave: this is a known issue that we’ll be looking at resolving early next year. In the meantime, you can manually validate the token without checking for iss (instructions here)

2 Likes