Hi I have a bunch of customs app “private” that was developed in house, they are NOT partner apps (and we are not a partner). We use the shpat_ access token to make graphql calls to configure webhooks that push read_customers, read_orders to our webhooks.
Under the new dev dashboard these apps don’t show, is the dev dashboard specifically for partner apps? Will what we do be completely deprecated, if we want tp develop new apps that use the shpat_ token to access the graphql, do we have to do it through the new dashboard will this method be remove deprecated?
Custom apps in admin do not show up in the Dev Dashboard. To build a similar type of app in the Dev Dashboard you will want to create a new app in the Dev Dashboard and then use the client credentials grant to acquire an access token programatically.
Ok thanks! And clients credentials using GraphQL are here to stay? It’s not something thats being deprecated any time soon?
Client credentials is here to stay. We added support for this grant type specifically for this use case.
Thanks. Perfect. I have that working partially now. The last thing we used to enable read_customer and read_checkouts scopes and registered a webhook through graphql for these two topics: CHECKOUTS_CREATE and CHECKOUTS_UPDATE
Now when we try to register the webhooks, we get “This app is not approved to subscribe to webhook topics containing protected customer data. See Work with protected customer data for more details.”
In the new App I have already added *read_*customer and read_checkouts
And in the admin UI of the store/app we see this as private data. So it looks like we can?
If you created the app in a merchant organization (not a partner org) the app should have access to protected customer data by default. Is this in a merchant or a partner org?