shopify.flow.validate

February 6, 2024 · View on GitHub

Takes in a raw request and the raw body for that request, and validates that it's a legitimate Shopify Flow extension request.

Refer to the Flow documentation for more information on how this validation works.

Example

app.post('/flow', express.text({type: '*/*'}), async (req, res) => {
  const result = await shopify.flow.validate({
    rawBody: req.body, // is a string
    rawRequest: req,
    rawResponse: res,
  });

  if (!result.valid) {
    console.log(`Received invalid Flow extension request: ${result.reason}`);
    res.send(400);
  }

  res.send(200);
});