// shopify integration

Shopify webhook + app development against localhost

Shopify Partners requires HTTPS for app URLs and webhook endpoints. lrok ships a real cert at the edge so Shopify's verification flow accepts your dev URL the same way it accepts a deployed app.

1 · Set up the lrok tunnel

  1. 1. Reserve

    $ lrok reserve shopify-dev
  2. 2. Run app

    $ npm run dev
  3. 3. Tunnel

    $ lrok http 3000 --hint shopify-dev

2 · Configure Shopify

  1. 1. Shopify Partner Dashboard → your app → App setup

    App URL: https://shopify-dev.lrok.io. Allowed redirection URL(s): https://shopify-dev.lrok.io/auth/callback.

  2. 2. Webhook subscriptions

    Endpoint URL: https://shopify-dev.lrok.io/webhooks. Topic: orders/create, products/update, app/uninstalled.

// shopify-specific gotcha

Shopify webhooks use X-Shopify-Hmac-Sha256: <base64>. Note the base64 — comparing as hex always fails. Use /tools/webhook-signature-verifier with the Shopify provider selected.

More integrations