Definitely a great addition, especially the “Run test” button, which helps ensure nothing breaks in production. Thanks for shipping this, @ShopifyDevs!
Love the UX of the new IP allowlist feature in the Shopify Dev Dashboard, which blocks API calls from outside the defined IPs.
This is normally a scary feature, but they have a "Run Test" button that checks if everything will work correctly and gives confidence. Love the UX, thanks @eytanseidman and the team 🙏
You're invited to our next Partner Town Hall
Nov 5, 10:00 am ET
We've got a stacked list:
1. VP of Partnerships @atleeclark
2. VP of Product @eytanseidman
3. Chief Information Security Officer Andrew Dunbar
Looks like Shopify is rolling out new security measures to help keep apps safer, including IP restrictions for API keys (a welcome improvement!) and more. ⬇️
@john_mccain__ I've already migrated 4/5 apps, so maybe I'm worrying too much! Just being extra cautious with my biggest one. If something breaks, it could affect thousands of stores at once, and merchants would need to reauth... So not ideal!
I'm curious: among the Shopify app developers following me, who's still putting off the expiring tokens migration? Has anyone completed it on a relatively large app that relies heavily on webhooks and other API integrations? If so, did you run into any issues?
Yeah, being a solo dev is getting harder, even with AI. I haven’t been able to ship meaningful new features in months because I’m constantly catching up with Shopify changes: expiring tokens, admin redesign, extension rewrites, and now Sidekick integration… 🥵
@Nicochon J’ai testé d’autres plateformes et je pense que Shopify reste malgré tout (de loin) la meilleure pour les devs indépendants… même si c’est plus compliqué ces derniers mois avec la concurrence accrue et la charge de boulot qui augmente
Don’t get me wrong, I know these changes are for the best. It’s just that everything moves so fast these days. The paradox of AI, I guess.
Oh, and just saying… it would be nice if Shopify could at least push back the expiring tokens migration deadline a little 👀
Yeah, being a solo dev is getting harder, even with AI. I haven’t been able to ship meaningful new features in months because I’m constantly catching up with Shopify changes: expiring tokens, admin redesign, extension rewrites, and now Sidekick integration… 🥵
@soulchildpls Congrats! I was still debating whether to migrate my last app, hoping Shopify would postpone the deadline… but with no news so far, I guess it’s time to bite the bullet and start the migration this week 😅
@abhishek_ktsu@matthewsmith@liam_at_shopify Yes exactly the same. Managed to fix it in one of my apps by rendering the view in the backend but seeing the same in another app!
Exactly. The past few months have been pretty overwhelming. I’m still spending a ton of time properly migrating my apps to expiring tokens, and now another deadline pops up for script tags I didn’t even realize some old merchants were still calling...
all good but one small piece of feedback to @ShopifyDevs though:
would it make sense to send those alerts a month in advance instead of a week before the deadline?
Now that it’s been a few months since Mantle announced they were shutting down, I’m curious: what is everyone using as a good alternative for the analytics side of things?
Hey @DOStatus@digitalocean, presigned URLs on the NYC3 Spaces CDN are returning 403 across two production apps. The same URLs work when bypassing the CDN and hitting Spaces directly. This started suddenly with no changes on our side. Please investigate ASAP!