Skip to content

Conversation

k-melnychuk
Copy link
Contributor

WIP

This pull request is waiting on #65 to be merged in to avoid merge conflicts about generated Route types.

WHY are these changes introduced?

Fixes #11 by adding admin authenticate middleware at the top level of /app route.
This change also protects the /app/additional page provided by this template, which currently lacks a loader with an admin.authenticate call and is publicly accessible outside of the Shopify Admin UI.

Checklist

  • I have made changes to the README.md file and other related documentation, if applicable
  • I have added an entry to CHANGELOG.md
  • I'm aware I need to create a new release when this PR is merged
@k-melnychuk k-melnychuk requested a review from a team as a code owner September 25, 2025 11:53
@k-melnychuk k-melnychuk force-pushed the feature/auth-middleware branch from 1fa5169 to 8dc1d07 Compare September 26, 2025 22:39
@byrichardpowell
Copy link
Contributor

byrichardpowell commented Sep 30, 2025

Hey @k-melnychuk 👋

This is awesome. Thanks so much for submitting this PR.

We really want middleware, but I think we'll likely add code to the @shopify/shopify-app-react-router package, rather than adding extra code to the template. As such, I'm going to close this PR. Really sorry if that's disappointing.

In the meantime, ofc feel free to take this approach. It's likely we'll take a similar one, just inside the package.

Again, thanks for the PR. I really appreciate it.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

2 participants