Shopify / shopify-marketplaces-admin-app

MIT License
38 stars 45 forks source link

App must set security headers to protect against clickjacking. #29

Open SmolSoftBoi opened 1 year ago

SmolSoftBoi commented 1 year ago

The app must be installed to perform the security check. Shopify expected OAuth to be initiated at https://app-security.myshopify.com/admin/oauth/authorize but was redirected to https://app-security.myshopify.com/admin/apps/d8fe67d6d0fe35202185abf63ea29ffb/?hmac=270b47e0ae71c321b604e68d0bd934d9a75ae9acc15b09c330de379791294c61&host=YXBwLXNlY3VyaXR5Lm15c2hvcGlmeS5jb20vYWRtaW4&shop=app-security.myshopify.com&timestamp=1665077426. The app must request installation immediately after clicking "add app." Apps must request shop access during installation or reinstallation if the app was previously uninstalled from the shop. Learn more about authentication in our developer documentation