Shopify

• Client ID
• Client Secret
• Scopes Requested
• Shopify Developer account, also known as a Shopify Partner account. You can create one here.
• Shopify development store. Learn more about creating a development store here.
• Shopify application. Learn more about creating a Shopify application here.

​

Add the Redirect URL to your Shopify app

1. Log in to your Shopify Partner Dashboard and select your app.
2. Navigate to App setup > URLs > Allowed redirection URL(s)
3. Add your app’s Initial Redirect URL to “App URL”. While testing your integration, you can use your app’s root URL. Once you set up an Initial Redirect to go live, you will need to change this to the URL of your Initial Redirect.
4. Add your app’s Redirect Callback URL to “Allowed redirection URL(s)”. While testing your integration, you can use https://passport.useparagon.com/oauth. Once you set up a Redirect Callback to go live, you will need to change this to the URL of your Redirect Callback.
5. Press the Save button at the top of the page to save your changes.

​

Add a development store to your Shopify app

1. Log in to your Shopify Partner Dashboard.
2. Click Apps on the sidebar.
3. Select your Shopify application.
4. In the Test your app section, press the Select store button.
5. Choose the development store you’d like to connect to.

​

Add your Shopify app to Paragon

1. Select Shopify from the Integrations Catalog.
2. Under Integrations > Connected Integrations > Shopify > App Configuration > Configure, fill out your credentials from the end of Step 1 in their respective sections:

• Client ID: Found under Apps > Client credentials > Client ID on your Shopify app page.
• Client Secret: Found under Apps > Client credentials > Client Secret on your Shopify app page.
• Permissions: Select the scopes you’ve requested for your application. For a list of recommended scopes, please view this integration within your Paragon dashboard. View dashboard. A complete list of Shopify’s scopes is here.

​

Connecting to Shopify

// You can find your project ID in the Overview tab of any Integration

// Authenticate the user
paragon.authenticate(<ProjectId>, <UserToken>);

// Create Customer
await paragon.request("shopify", "/admin/api/2020-10/customers.json", { 
  method: "POST",
  body: { 
    "first_name": "John",
    "last_name": "Norman",
    "email": "[email protected]",
    "phone": "+16135551111",
    "note": "Creating customer for testing",
    "tags": ["tag1","tag2"]
   }
});


// Query Customers
await paragon.request("shopify", "/admin/api/2020-10/customers.json", { 
  method: "GET"
});
  

​

Building Shopify workflows

• Get Customers
• Search Customers
• Create Customer
• Update Customer
• Get Orders
• Create Order
• Update Order
• Get Abandoned Carts
• Get Products
• Create Product
• Update Product

​

Using Webhook Triggers

• New Order
• Order Updated
• New Customer
• Customer Updated
• New Product
• Product Updated
• Customer Data Request
• Customer Data Erasure Request
• Shop Data Erasure Request

​

Publishing your Shopify app

​

Setting up Redirect Pages in your app

• Initial Redirect: This page will take in a shop query parameter and redirect to Shopify’s OAuth flow.
• Redirect Callback: This page will receive the OAuth authorization code after the Shopify user grants consent and call paragon.completeInstall to save the user’s account connection.

• Example Initial Redirect
• Example Redirect Callback

​

Initial Redirect

• Accept and read the query parameter shop. If the query parameter is present, redirect to the following URL to start the Shopify OAuth flow:

https://{shopQueryParam}/admin/oauth/authorize?client_id={SHOPIFY_CLIENT_ID}&redirect_uri={REDIRECT_CALLBACK_URL}&scope={SHOPIFY_SCOPES}

• The SHOPIFY_CLIENT_ID should match the Client ID that you use in your Shopify integration settings.
• The REDIRECT_CALLBACK_URL should be the URL of the Redirect Callback page in your app.
• The SHOPIFY_SCOPES should match the scopes that you use in your Shopify integration settings.

​

Redirect Callback

• Import the Paragon SDK and authenticate a user.
  • Note: If a user is not yet logged into your app, you can redirect to a login form, while preserving the intended URL to redirect to upon successful login. In other words, after logging in, your user should see your Redirect Page.
• Accept and read query parameters, which will be:
  • code and shop in case of a successful installation
  • error in case of an unsuccessful installation or denied consent
• If the code query parameter is present,
  • Read the shop query parameter and capture the shop name in the pattern {shop}.myshopify.com. See the regular expression used below.
  • Call paragon.completeInstall to complete the OAuth exchange and save a new connected Shopify account.

let params = new URLSearchParams(window.location.search);
let authorizationCode = params.get("code");
let [, shopName] = params.get("shop").match(/^([a-zA-Z0-9][a-zA-Z0-9\-]*).myshopify.com/);

if (authorizationCode && shopName) {
   paragon.completeInstall("shopify", {
    authorizationCode: authorizationCode,
    redirectUrl: "https://your-app.url/shopify-redirect",
    integrationOptions: {
      SHOP_NAME: shopName,
    }
  }).then(() => {
     // Redirect to your app's integrations page
  });
} else {
  let error = params.get("error");
  // Handle error
}

• If the error query parameter is present,
  • Show this error in your app and allow your user to retry the process.

​

Updating your app’s redirect and app URLs

1. Log in to your Shopify Partner Dashboard and select your app.
2. Navigate to App setup > URLs > Allowed redirection URL(s)
3. Set your App URL to your app’s Initial Redirect URL.
4. Add your app’s Redirect Callback URL to Allowed redirection URL(s).

​

Subscribing to mandatory privacy webhooks

​

Setting the Shopify Webhook URL

• Click on the Settings tab and copy the Webhook URL value.

• Select the app that you are using in the environment or project you have opened in Paragon.
• Navigate to Configuration (under the Build section) and scroll to Compliance Webhooks.
• For each of the endpoints (Customer data request endpoint, Customer data erasure endpoint, Shop data erasure endpoint), paste in the Webhook URL value you copied from the Paragon dashboard.
• Click Save and release at the top to save your changes.

​

Creating workflows to respond to privacy webhooks

• Customer data request
• Customer data erasure
• Shop data erasure

• Customer data request: If your app has been granted access to customer or order data, then it will receive a data request webhook. The webhook contains the resource IDs of the customer data that you need to provide to the store owner. It’s your responsibility to provide this data to the store owner directly.
  • Note: This request does not require the data to be provided in a response to the webhook. This process happens outside of Shopify and should be provided to the user who connected this Shopify account directly, e.g. through email, within 30 days of receiving the request.
• Customer data erasure: Shopify store owners can request that data is deleted on behalf of a customer. When this happens, Shopify sends a Customer Data Erasure event to the apps installed on that store so that you can erase any data for a certain customer of a store from your database.
• Shop data erasure: 48 hours after a store owner uninstalls your app, Shopify sends a Shop Data Erasure event. This webhook provides the store’s shop_id and shop_domain so that you can erase data for that store from your database.

• Click the context menu in the Workflow Editor toolbar and click Edit Connect Portal Workflow Settings.
• Switch on Default to enabled and Hide workflow from Portal for all users.

• Repeat for each workflow that has a Shopify privacy event trigger.

​

Testing and validating privacy webhooks

• Verify that each of your workflows are deployed.
• In your application, connect a Shopify store to the Connect Portal. Remember the store and account that you have connected.
• In the Shopify Admin page for the same store, request or erase a customer’s data (see Shopify documentation). These actions will trigger the “Customer data request” and “Customer data erasure” events, respectively.
• In the Paragon dashboard, visit Task History and verify that your workflow has executed.