Shopify sets a January 2027 deadline to kill non-expiring tokens
Public apps still using non-expiring offline access tokens on the Admin API get a hard cutover date, with a second deadline in April that starts returning 403s.
Tagged
Shopify
From The Wire
Shopify adds network access rules to shopify.app.toml
A new network_access section lets apps declare the external hosts they talk to, so Shopify can flag connections that were never declared.