d
Topic
Posts:
449
19 days ago

Inconsistent scope for REST vs Webhook for fulfillment events

As far as I can tell, an app can read fulfillment events with the read_orders scope.

However, this doesn't seem to be enough to subscribe to the fufillment event webhooks (fulfillment_events/create, fulfillment_events/delete). This requires the read_fulfillments scope.

It doesn't make sense that the app can read these but not subscribe to the webhooks.

Can anyone shed some light? I think it's a bug. Those webhooks should be allowed with only read_orders scope, right?

 

i
Replies
Alex Richter Developer Experience
Posts:
501
12 days ago

Hey Clement,

Thanks for the heads up. I agree with you on this one. I'm going to bring this to our engineering team and see about getting that one addressed.

Cheers.

Posts:
449
12 days ago

Good to hear!