// shopify integration
Shopify webhook + app development against localhost
Shopify Partners requires HTTPS for app URLs and webhook endpoints. lrok ships a real cert at the edge so Shopify's verification flow accepts your dev URL the same way it accepts a deployed app.
1 · Set up the lrok tunnel
1. Reserve
$ lrok reserve shopify-dev2. Run app
$ npm run dev3. Tunnel
$ lrok http 3000 --hint shopify-dev
2 · Configure Shopify
1. Shopify Partner Dashboard → your app → App setup
App URL: https://shopify-dev.lrok.io. Allowed redirection URL(s): https://shopify-dev.lrok.io/auth/callback.
2. Webhook subscriptions
Endpoint URL: https://shopify-dev.lrok.io/webhooks. Topic: orders/create, products/update, app/uninstalled.
// shopify-specific gotcha
Shopify webhooks use X-Shopify-Hmac-Sha256: <base64>. Note the base64 — comparing as hex always fails. Use /tools/webhook-signature-verifier with the Shopify provider selected.