Hey folks — running into an issue where our embedded app (built on @shopify/shopify-app-react-router 1.2.1) never finishes loading in Shopify Admin. It just sits on Admin’s “Handling response” screen forever, no error shown.
I spent a good while isolating this and I’m fairly confident it’s not something in our app:
- DevTools shows the hang happens inside a small nested iframe on
/auth/session-token(the session-token bounce page). That page’s entire body is just<script data-api-key="..." src="https://cdn.shopify.com/shopifycloud/app-bridge.js"></script>— Shopify’s own CDN-hosted App Bridge script, nothing of ours. - The console logs a warning from that script: “using deprecated parameters for the initialization function; pass a single object instead.”
- After that warning, zero requests ever reach our app’s server — so whatever’s stalling is happening client-side, inside App Bridge/Admin’s own bootstrap, before it even tries to load our iframe content.
Things I’ve ruled out with actual testing (not just guesses):
- Our own server/auth code and CSP config (read the library source directly — no legacy OAuth strategy even exists in this version to misconfigure)
Things I’ve ruled out with actual testing (not just guesses):
- Our own server/auth code and CSP config (read the library source directly — no legacy OAuth strategy even exists in this version to misconfigure)
- Package version (diffed 1.2.1 against the latest 2.1.0 — identical relevant code)
- Browser/extensions (fresh Chrome, Edge, Opera profiles, all extensions off)
- Third-party cookie restrictions
- Network path (reproduced on an unrelated mobile network)
- Tunnel provider (reproduced identically on Cloudflare Quick Tunnel and a separate SSH-based tunnel)
- Store/account-wide issue (a normally-installed app — Shopify Inbox — loads instantly on the same store/login)
Filed a GitHub issue with full repro details here: Embedded app stuck on Admin "Handling response" — hang inside App Bridge bootstrap, not app code · Issue #586 · Shopify/shopify-app-bridge · GitHub
Has anyone else hit this? Curious if it’s tied to a specific app config (distribution type, scopes) or if it’s a broader regression in App Bridge’s bootstrap right now.