Hey team! So there’s an announcement from May that non-channel apps can use the storefront API.
https://shopify.dev/changelog/storefront-api-is-now-available-to-non-channel-apps
I requested new scopes for my public app and Shopify confirmed I have one of the unauthenticated scopes.
{
“handle”: “unauthenticated_read_product_listings”,
“description”: “Read product information”
}
But any attempts to generate a storefront access token fails.
{
"data": {
"storefrontAccessTokenCreate": null
},
"errors": [
{
"message": "Access denied for storefrontAccessTokenCreate field.",
"locations": [
{
"line": 2,
"column": 2
}
],
"path": [
"storefrontAccessTokenCreate"
],
"extensions": {
"code": "ACCESS_DENIED",
"documentation": "https://shopify.dev/api/usage/access-scopes"
}
}
],
"extensions": {
"cost": {
"requestedQueryCost": 10,
"actualQueryCost": 10,
"throttleStatus": {
"maximumAvailable": 1000.0,
"currentlyAvailable": 990,
"restoreRate": 50.0
}
}
}
}
Usually I’m great with debugging, but I don’t understand the logic apps like mine are supposed to take to access the storefront API and there aren’t any tutorials showing how public apps can request tokens either. Can anybody share reasons why Shopify is denying storefront access tokens?