d
Topic
Jerome Member
Posts:
2
April 28, 2017
g
1
upvotes

How to get access to the new Storefront API? This post is outdated

I am trying to play around with the Storefront API that was announced last week at the Shopify Unite conference.

Using the traditional Shopify API in my toy app, when I do:

ShopifyAPI::StorefrontAccessToken.create(title: 'test')

I get this error:

ActiveResource::ForbiddenAccess: Failed.  Response code = 403.  Response message = Forbidden.

Do I need to change a setting in my app, or to request a special access? It is not mentioned in the documentation how to get any authorization.

i
Replies
Joe Shopify Partner
Posts:
9
April 28, 2017

Hi Jerome

If you go to this page  https://help.shopify.com/api/storefront-api/getting-started#accessing-the-storefront-graphql-endpoint and then under the "obtaining a storefront access token" I think you will just have to edit your current app to have the below.

In the Custom Storefront section, be sure to select Allow this app to access data from your storefront.

Hope that helps

Joe

Jerome Member
Posts:
2
April 28, 2017
g
1
upvotes

Hi Joe,

That would work for a private app. For my use case though, I am trying to work on a public app. :-)

The "Obtaining a Storefront Access Token" section that you point out has two sets of instructions, one for private apps, with the instructions you gave me above.

The other set of instructions are toggled when I click on the "Via the REST API" button, which I assume is for public apps:

  1. Make sure you have the credentials necessary to make authenticated requests to the Shopify API.
  2. Create your Storefront Access Token as described in the reference here.

When I try to create the token, I get the error mentioned in my original post.

Posts:
5
May 09, 2017

Similar issue. Any luck?

Posts:
37
Last edited May 17, 2017

Same issue here also. Any information? I think this API belongs to sales channel SDK.

thung Member
Posts:
3
June 15, 2017

im having the same issue

Posts:
3
July 11, 2017

I'm encountering the same issue, any solution yet?

Jamie D. Developer Experience
Posts:
533
July 12, 2017
g
1
upvotes

Hey all,

In order to successfully create a Storefront Access Token, your application must request one of the following scopes during OAuth:

* unauthenticated_read_product_listings
* unauthenticated_read_collection_listings
* unauthenticated_write_checkouts
* unauthenticated_write_customers

The Storefront Access Token will inherit any unauthenticated scopes from the access token that was used to created it.

An unauthenticated scope represents a level of access appropriate for an unauthenticated user, such as a customer on a storefront.

If you attempt to request a Storefront Access Token without having such a scope, you'll currently receive a 403 Forbidden error response.

Hope this helps to clear things up.

Posts:
3
July 13, 2017

Thanks for your help, your solution worked. I didn't realize that those scopes had been added to the regular scopes, I imagined they would only be available for the acces token.

However, after I got my access token, I can't use it to request information from GraphQL. Whenever I try to use it, I get a `Bad request` with the error message `SyntaxError: Unexpected token < in JSON at position 1`. When I use the token available in the specific store settings, I can get results with the same query. Any help on that?