search

Shopify / checkout-sheet-kit-android

Shopify’s Checkout Sheet Kit makes it simple to perform a checkout inside your Android app.
MIT License
10 stars 1 forks source link

Checkout page requires auth #121

Open nAkhmedov opened 3 weeks ago

nAkhmedov commented 3 weeks ago

What area is the issue related to?

Checkout Sheet Kit

What version of the package are you using?

3.0.4

Reproducible sample code

We are using this library to open shopify checkout page, buyer identity is attached to the cart. However checkout page is requiring authorization. How to open checkout page without auth?

Steps to Reproduce

Expected Behavior

The checkout page should not require auth. Because, buyer identity is attached to cart.

Actual Behavior

The checkout page is requiring auth

Screenshots/Videos/Log output

No response

Storefront domain

https://a9dc00-93.myshopify.com

markmur commented 3 weeks ago

Hey @nAkhmedov, how are you authenticating the user? Are you attaching a customerAccessToken in the buyerIdentity object of the CartInput?

https://shopify.dev/docs/api/storefront/2024-04/input-objects/CartBuyerIdentityInput

Djani89 commented 3 weeks ago

Hey, we're experiencing the same issue!

Please note, this issue only occurs when the "Require customers to log in to their account before checkout" option is enabled in our Shopify Admin Dashboard.

@markmur Just to confirm, yes we are attaching customerAccessToken in the buyerIdentity object.

kiftio commented 3 weeks ago

Unfortunately, attaching a customerAccessToken to the cart doesn't currently fully authenticate the customer. There's an ongoing project that is looking to change that, with a couple of security related limitations.

Until then, if you're a plus merchant, you could look into using multipass to fully authenticate customers, but it might be worth holding on for the above change.

nAkhmedov commented 3 weeks ago

Hey @nAkhmedov, how are you authenticating the user? Are you attaching a customerAccessToken in the buyerIdentity object of the CartInput?

https://shopify.dev/docs/api/storefront/2024-04/input-objects/CartBuyerIdentityInput

yes

nAkhmedov commented 3 weeks ago

Unfortunately, attaching a customerAccessToken to the cart doesn't currently fully authenticate the customer. There's an ongoing project that is looking to change that, with a couple of security related limitations.

Until then, if you're a plus merchant, you could look into using multipass to fully authenticate customers, but it might be worth holding on for the above change.

looking for the solution asap