Hi there,
I’m trying to follow the guide to create an unauthenticated Storefront Access Token, but I’m consistently getting an permissions denied error from the Shopify GraphQL API.
graphQLErrors: [
{
message: 'Access denied for storefrontAccessTokenCreate field.',
locations: [Array],
path: [Array],
extensions: [Object]
}
],
There’s no mention of which scopes are required for this endpoint. It would be nice if all queries and mutations at least listed which scopes they require in the docs.
But that aside, can someone please clarify which access scopes you need to generate an authenticated vs unauthenicated Storefront Access Token?
Do you only need to request scopes for specific online store resources like checkout, customer, product, etc? Or is there a general unauthenticated_access_token_write scope that you need to request to first be able to create these tokens?
Thanks!