d
Topic
Ryan O Shopify Employee
Posts:
197
Last edited 6 months ago
g
1
upvotes

HTTP Webhooks being removed.

Hey all,

In 2018 HTTP is a thing of the past, and over ~95% of you agree.  We are looking to reach 100% HTTPS by 2019.  Therefore we are going to start the deprecation of HTTP webhooks completely.  Here is what the timeline looks like:

 

On May 1st 2018, newly created apps will no longer be able to create HTTP webhooks.
On July 1st 2018, all apps will no longer be able to create HTTP webhooks.
On January 1st 2019, all remaining HTTP webhooks will be removed.

 

As always feel free to comment with and questions or concerns.

Regards,

Shopify Apps Team

i
Replies
Posts:
2
6 months ago

To clearify, is a "new API client" an App created after May 1st or a store that newly authenticates with your application after that date?

Clayton Smith Shopify Employee
Posts:
6
6 months ago
g
1
upvotes

That means an app created after May 1.

Ryan O Shopify Employee
Posts:
197
6 months ago
g
1
upvotes

Clayton is correct, I will edit the original post for clarity.

Posts:
3
5 months ago

Will https webhooks require a valid SSL certificate?

Posts:
14
Last edited 5 months ago

Is there any way that this can be extended to May 7?

We are using private apps.

Ryan O Shopify Employee
Posts:
197
5 months ago

Hi Paul,

The change for May 1st only affects new apps created after May 1st.  The change should go out later today, we are not extending the date.


Ryan

Ryan O Shopify Employee
Posts:
197
5 months ago

Update: This is now live.

Posts:
3
5 months ago

Sorry I asked this a few day ago but never got a reply and there's nothing in the documentation as far as I can tell.

Will https webhooks require a trusted SSL cert that is signed from a trusted CA such as Verisign, Digicert, etc?

Ryan O Shopify Employee
Posts:
197
5 months ago

Hi John,

Yes this has been required since February.

Cheers,

Ryan

Posts:
4
5 months ago

Hi Ryan,

Sorry to asking same question as John asked.

Will https webhooks works with Let's Encrypt SSL cert as well? 

Simply Programmer
Ryan O Shopify Employee
Posts:
197
5 months ago

Hemal,

Let's Encrypt should be fine.

Ryan

Posts:
4
5 months ago

Hi Ryan,

Thanks for guiding us.

Hemal

Simply Programmer
Posts:
3
4 months ago

Ryan,

    It would seem that as of around 5PM Eastern yesterday, our http webhooks have stopped functioning. Not sure if http webhooks were disabled by mistake or if something else has gone wrong. Thanks for any input you may have.

Thanks,

John

Posts:
100
4 months ago

Hi,

Good step toward 100% ssl support but one thing is still unclear to me (could not find any infos about that).

On January 1st 2019, all remaining HTTP webhooks will be removed.

Does this mean app devs will have to re-create all webhooks (like uninstall hooks) pointing to https? Or do you (shopify) automatically convert previously created http hooks by calling the registered hook via https instead of http?

Ryan O Shopify Employee
Posts:
197
4 months ago

The expectation is that app devs will re-create any http webhooks as https.

Posts:
100
4 months ago

May I ask why you do not convert those hooks on your end? Just curious

Posts:
2
Last edited 4 months ago

The expectation is that app devs will re-create any http webhooks as https.

What about shops that are frozen? We can't recreate webhooks for those and they keep sending "shops/update" webhooks to the HTTP endpoint.

Ryan O Shopify Employee
Posts:
197
4 months ago

Hi Ricardo,

As of January 1st 2019, we will flush all of those webhooks.  However I will check into the viability of converting them, I'm assuming your use case is watching shop/update to see if they become active again?

Cheers,

Ryan

Posts:
2
4 months ago

Hi Ryan,

That's correct. Would be great if those were converted to HTTPS as we're on track to drop HTTP completely.

Best,

Ricardo

Posts:
100
4 months ago
g
1
upvotes

@Ryan: Could you PLEASE tell me why existing http hooks are not converted to https on your end?

Ryan O Shopify Employee
Posts:
197
3 months ago

On May 1st 2018, newly created apps will no longer be able to create HTTP webhooks.
On July 1st 2018, all apps will no longer be able to create HTTP webhooks.

These are both live.

Oz Member
Posts:
1
about 2 months ago

So we discovered that you stopped supporting HTTP the hard way, the problem is that the only reason we used HTTP in the first place was because we never got the webhooks to work when using an HTTPS url. 

the url that we're using looks something like this: https://secure.ourdomain.net/api/int/shopify/whProduct?userId=59d2c21459c

the ssl certificate is valid, it was issued by letsencrypt and it works when testing it with curl, however we never get any calls from shopify. All the webhooks seems to be registered and it does work when we're using the http url, then we get the calls properly.

Please help,
Thanks.

Log in or sign up for an account to reply.

f
Your Reply