Hi,
We are building a .NET Core web application that connects to any Shopify store (with the merchant’s permission) so we can read orders and customer data and provide customer-service support.
I created a public app in Shopify Partners and implemented OAuth using the app’s Client ID and Client Secret, which is working.
However, I am stuck during the app submission process, specifically on the requirement to process mandatory compliance webhooks.
Here is what I’ve tried and where I’m confused:
-
While creating the app, I added a return URL pointing to my web application.
-
On that return URL page, I attempted to use the Shopify Admin API to create the three mandatory compliance webhooks.
-
When I click the “Run” button on the Shopify Partners submission page, that return URL is never called, and my page is not hit at all.
-
I already have controller endpoints in my .NET app to receive the three mandatory compliance webhooks.
-
According to Shopify documentation, these webhooks can be defined in the
shopify.app.tomlfile, but I learned that this only applies to apps created using the Shopify CLI. -
My app is not built with the Shopify CLI. It’s a custom .NET web app that should work with any Shopify store that installs it.
Because of this, I’m not sure what the correct approach is.
Could you please guide me on how to properly pass the submission requirements for:
-
Providing the mandatory compliance webhooks
-
Verifying incoming webhooks using HMAC signatures
Any clarification on how Shopify expects non-CLI, custom apps to handle this would be greatly appreciated.
Thank you.
