Basic HTTP authentication in shopify

Generate API credentials

1. From your Shopify admin, go to Apps.
2. Click Manage private apps, near the bottom of the page.
3. Click Create new private app.
4. In the App details section, enter a name for the private app and a contact email address. Shopify uses this email address to contact the developer if there is an issue with the private app, such as when an API change might break it.
5. In the Admin API section, select the areas of your store that you want the app to be able to access.
6. Optional: To use the Storefront API, select Allow this app to access your storefront data using the Storefront API, and then select which types of data you want to expose to the app.
7. Click Save.

Make authenticated requests

Private apps can authenticate through basic HTTP authentication by using their Admin API key and password as a username and password.

Some HTTP clients support basic authentication by prepending username:password@ to the hostname in the URL. For example:Copy

https://{username}:{password}@{shop}.myshopify.com/admin/api/2022-01/{resource}.json

• {username}: The API key that you generated.
• {password} : The API password that you generated.
• {shop}: The name of your development store.
• {api-version} — The supported API version that you want to use.
• {resource} – A resource endpoint from the REST Admin API.

A URL with real values looks like this:Copy

https://38b3692b6b48a9712b8d909c46e6208d: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@example.myshopify.com/admin/api/2021-07/products.json

If your HTTP client doesn’t support basic authentication using this method, then you can provide the credentials in the Authorization header field instead:

1. Join the API key and password with a single colon (:).
2. Encode the resulting string in base64 representation.
3. Prepend the base64-encoded string with Basic and a space

Authorization: Basic NDQ3OGViN2FjMTM4YTEzNjg1MmJhYmQ4NjE5NTZjMTk6M2U1YTZlZGVjNzFlYWIwMzk0MjJjNjQ0NGQwMjY1OWQ=