Security acound Access Token for Flow "Send HTTP request"

I am working on Flow “Send HTTP request”.

That Flow requires to provide raw string for X-Shopify-Access-Token.

Is there a way, I can mask this token? If the token is exposed, it can affect the revenue.

Any suggestion is welcome.

Consider using the Send Admin API request action instead.

How can I use this mutation with the that request?

customerSendAccountInvite

Do you mean customerSendAccountInviteEmail? Unfortunately that’s only available in the most recent 2024-10 version of the Admin API and Flow is still running on the 2024-04 version. It should become available when Flow adopts 2024-10 in the near future.

When will Flow adopt 2024-10?

Hi abcgreat! As a workaround, you can use the Send HTTP request action from our app Flow Companion. This action allows you to specify different authentication methods, including using the X-Shopify-Access-Token header. The header value cannot be read after saving the settings. All app secrets are stored in the database in encrypted form.

This app is paid, but it offers a 30-day trial period. Perhaps these 30 days will be enough to wait for the moment when Flow transitions to API version 2024-10.

If you have any questions, I will be happy to answer them.

Is there a way to get notified when Flow transitions to API version 2024-10?