OAuth Test
Manually trigger OAuth flow to test store connection
Start OAuth Flow
Use this to simulate a user clicking "Install App" from the Shopify App Store. This will redirect you through the OAuth authorization flow.
OAuth Flow Steps
-
KC SPI Install Endpoint
Validates HMAC + timestamp and redirects to Shopify (the simulator) -
Simulator OAuth Page
User creates/selects store and authorizes -
KC SPI Callback
Receives auth code, exchanges for token -
Token Exchange
SPI calls /admin/oauth/access_token -
Token Persisted
SPI stores the encrypted token in Keycloak's DB (shopify_store_install) -
Redirect to Dropea
User redirected to /store/register to finalize
Configuration
KC SPI Install URL:
https://stg.kc.dropea.com/realms/dropea/shopify-install/install
Simulator OAuth:
http://localhost:3100/oauth/authorize
Token Endpoint:
http://localhost:3100/admin/oauth/access_token
Make sure Keycloak is configured to use the simulator URLs (SHOPIFY_SIMULATOR_URL / SHOPIFY_SIMULATOR_BROWSER_URL) instead of real Shopify URLs.