---
id: change/bcapps/9327
type: change
title: "#9327 [Shopify] Migrate Shopify Connector to Expiring Offline Access Tokens"
summary: The Shopify Connector now supports Shopify's expiring offline access tokens with automatic refresh-token rotation. The connector transparently migrates legacy non-expiring tokens to expiring tokens during API calls and refreshes tokens before expiry, with a user notification when the refresh token expires.
tier: official
language: en
tags:
  - feature
  - main
  - bc30
  - codeunit shpfy communication mgt.
  - page shpfy shop card
  - codeunit shpfy authentication mgt.
  - table shpfy registered store new
system: integration
review:
  state: reviewed
  by: opus
  at: "2026-10-08T02:10:14.162Z"
  flags: []
generated:
  at: "2026-10-08T01:26:53.141Z"
  pipeline: 0.2.0
  prompts:
    extract-change: 1
  input_hash: 9c9227176addd1926fc80f7824d86feb2601d6be
evidence:
  - kind: code
    url: https://github.com/microsoft/BCApps/pull/9327
    title: "microsoft/BCApps#9327: [Shopify] Migrate Shopify Connector to Expiring Offline Access Tokens"
    date: "2026-08-05"
    commit: 9c9227176addd1926fc80f7824d86feb2601d6be
    t: null
    quote: As of December 2025, Shopify supports expiring offline access tokens with refresh-token rotation.
links:
  learn: []
  objects:
    - object/codeunit/30103
    - object/page/30101
    - object/codeunit/30199
    - object/table/30138
  features: []
  topics: []
  localizations: []
  videos: []
  posts: []
  guidelines: []
  changes: []
number: 9327
repo: microsoft/BCApps
source_id: bcapps-prs
url: https://github.com/microsoft/BCApps/pull/9327
kind: pr
base_branch: main
major: "30"
merged_at: "2026-08-05T12:44:07Z"
author: onbuyuka
author_type: User
community_contribution: false
labels:
  - "AL: Apps (W1)"
  - "Team: Integrations"
change_class: code
change_kind: feature
behavior_change: true
breaking: false
files:
  count: 10
  additions: 638
  deletions: 21
  al: 4
apps:
  - Shopify
objects_touched:
  - key: codeunit/30103
    page: codeunit/30103
    type: codeunit
    id: 30103
    name: Shpfy Communication Mgt.
    app: Shopify
    status: modified
  - key: page/30101
    page: page/30101
    type: page
    id: 30101
    name: Shpfy Shop Card
    app: Shopify
    status: modified
  - key: codeunit/30199
    page: codeunit/30199
    type: codeunit
    id: 30199
    name: Shpfy Authentication Mgt.
    app: Shopify
    status: modified
  - key: table/30138
    page: table/30138
    type: table
    id: 30138
    name: Shpfy Registered Store New
    app: Shopify
    status: modified
objects_unjoined: []
obsoletions: []
backports: []
fixes_issues: []
work_items:
  - 637954
systems:
  - integration
quote: As of December 2025, Shopify supports expiring offline access tokens with refresh-token rotation.
joined_against:
  major: "30"
  commit: ecbc028c25dbe83b61313bc566e6c1d41184bb1c
---

# #9327 [Shopify] Migrate Shopify Connector to Expiring Offline Access Tokens

> The Shopify Connector now supports Shopify's expiring offline access tokens with automatic refresh-token rotation. The connector transparently migrates legacy non-expiring tokens to expiring tokens during API calls and refreshes tokens before expiry, with a user notification when the refresh token expires.

[Pull request](https://github.com/microsoft/BCApps/pull/9327) · merged into `main` (BC30) on 2026-08-05 by onbuyuka · 10 files (+638 -21), 4 AL · feature · tier official · reviewed (checked by Opus)

## What changed

- New Token Expires At and Refresh Token Expires At fields on Shpfy Registered Store New; the refresh token is kept in IsolatedStorage
- New installs request expiring tokens, and legacy non-expiring tokens are migrated once per shop when an API call runs
- EnsureValidAccessToken is called from GetAccessToken, so every API call refreshes a token that is close to expiry
- An unexpected 401 response forces a single token refresh followed by one retry
- The Shop Card shows a reconnect notification when the refresh token has expired
- Behaviour changes for users or extensions.

## AL objects touched

- [Codeunit 30103 "Shpfy Communication Mgt."](../../objects/codeunit/30103.md), Shopify: modified
- [Page 30101 "Shpfy Shop Card"](../../objects/page/30101.md), Shopify: modified
- [Codeunit 30199 "Shpfy Authentication Mgt."](../../objects/codeunit/30199.md), Shopify: modified
- [Table 30138 "Shpfy Registered Store New"](../../objects/table/30138.md), Shopify: modified

## Context

- Work items: AB#637954
- Labels: AL: Apps (W1), Team: Integrations
- Systems: integration
- From the description: "As of December 2025, Shopify supports expiring offline access tokens with refresh-token rotation."

Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).