Shopify — app and Storefront API

shopify/app · version 1

envs add shopify/app

This declares the keys below in your catalog and sets none of them. A template is a schema for keys; it never carries a value.

Key	Needed	Kind	Notes
`SHOPIFY_API_KEY`	required	secret	The app's client id, read by Shopify's own app SDK under this name. Shopify says to keep the client id and secret behind your tokens secure, so it is not treated as public despite being the non-secret-sounding half.. where to get it
`SHOPIFY_API_SECRET`	required	secret	The app's client secret. Dev Dashboard apps rotate this in place with an overlap: generate the new secret, replace every stored token, then revoke the old. Admin-created custom apps cannot rotate at all and must be reinstalled.. where to get it
`SHOPIFY_STOREFRONT_ACCESS_TOKEN`	optional	config	Shopify says the public Storefront token is for client side queries and mutations, and in the same breath that the private one must be treated as secret and kept off the client. This is the public one. The name is convention; Shopify documents the header.. where to get it