I’ve created my Shopify app (using Shopify’s app setup), but the Auth URL and Redirect URLs point to my Laravel project.
Everything works fine locally — app installation and authentication are successful.
However, when I try to submit the app for distribution, the HMAC and GDPR webhook checks keep failing.
I’ve already:
-
Implemented the required GDPR webhooks in my Laravel project.
-
Tested them on Postman, and they respond correctly.
Still, both checks continue to fail, and I can’t figure out whether the issue is on my side or something internal on Shopify’s end.
Has anyone faced this issue or can help me understand what might be causing it?
I’ve attached a reference screenshot for more context.
