Shopify managed install requires [auth] in shopify.app.toml file

Extensions
1

I am trying to convert the existing installation of an app into Shopify Managed Installation. Here’s a minimal shopify.app.toml file that I updated based on https://shopify.dev/docs/apps/build/authentication-authorization/app-installation:

# Learn more about configuring your app at https://shopify.dev/docs/apps/tools/cli/configuration

client_id = "<MYID>"
application_url = "https://<MYURL>"
embedded = true
name = "MY TEST Local 1"
handle = "my-test-local-1"

[webhooks] api_version = "2025-01"

[access_scopes]
scopes = "read_themes,read_customer_events,write_app_proxy" 

[app_proxy] url = "https://MYURL.ngrok.io/"
subpath = "MYPROXY"
prefix = "MYPREFIX"

When I do a shopify app deploy, it requires me to add [auth]. Here’s the error I am getting:

image
image309×125 2.71 KB

When I do a shopify app deploy --reset, it automatically adds the auth > redirect_urls which is not what I am expecting.

Sorry for the foolish question, am I missing something / doing something wrong?

2

Add following:

[auth]
redirect_urls = []
3

This worked although it is counter-intuitive. Thanks!

EDIT: @Patrick_Jakubik I thought it worked but when I did that, it kept redirecting to the original redirect_url of our app so it didn’t work after all.

4

I still haven’t got this to work. This is what my app definition looks like in the last release. I’ve recreated the app and it still redirects to .../api/auth and doesn’t seem to do the shopify managed install.

Screenshot 2025-10-01 at 1.00.04 AM
Screenshot 2025-10-01 at 1.00.04 AM980×884 40.7 KB

5

Hi @ericute

Can you share the full shopify.app.toml again?

The screenshot you shared also has the App URL section censored, so we cannot read it. But the Use legacy install flow is definitely disabled, so that’s a good sign.

6

Hey, @Dylan.

I got this to work just now. I created the app as a new app with a different name. It worked as expected. A combination of @Patrick_Jakubik’s suggestion and renaming the app made it work.

Old name: Eric Local Test (recreated multiple times with the same name, redirects to the original redirect_url whenever I do an installation I.e. routes to .../auth/callback

New name: Eric DEV Test 1 (now installs using the managed install; no re-routing)

It seems it is caching something behind the scenes. Since I recreated with a different name, it worked.

This is my updated shopify.app.toml file:

client_id = "MY_CLIENT_ID"
embedded = true
name = "Eric DEV Test 1"
application_url = "https://XXXXXXX.ngrok.io"
handle = "eric-dev-test-1"

[webhooks]
api_version = "2025-07"

[access_scopes]
use_legacy_install_flow=false
scopes = "read_customer_events,read_themes,write_app_proxy,write_pixels"

[auth]
redirect_urls = []

[app_proxy]
url = "https://XXXXXXX.ap.ngrok.io"
subpath = "<SUBPATH>"
prefix = "apps"

[pos]
embedded = false