#9327 [Shopify] Migrate Shopify Connector to Expiring Offline Access Tokens
The Shopify Connector now supports Shopify's expiring offline access tokens with automatic refresh-token rotation. The connector transparently migrates legacy non-expiring tokens to expiring tokens during API calls and refreshes tokens before expiry, with a user notification when the refresh token expires.
- 10files
- 4AL files
- 4objects
Pull request · merged into main (BC30) on 2026-08-05 by onbuyuka · 10 files (+638 -21), 4 AL · feature · tier official · reviewed (checked by Opus)
What changed
- New Token Expires At and Refresh Token Expires At fields on Shpfy Registered Store New; the refresh token is kept in IsolatedStorage
- New installs request expiring tokens, and legacy non-expiring tokens are migrated once per shop when an API call runs
- EnsureValidAccessToken is called from GetAccessToken, so every API call refreshes a token that is close to expiry
- An unexpected 401 response forces a single token refresh followed by one retry
- The Shop Card shows a reconnect notification when the refresh token has expired
- Behaviour changes for users or extensions.
AL objects touched
- Codeunit 30103 “Shpfy Communication Mgt.”, Shopify: modified
- Page 30101 “Shpfy Shop Card”, Shopify: modified
- Codeunit 30199 “Shpfy Authentication Mgt.”, Shopify: modified
- Table 30138 “Shpfy Registered Store New”, Shopify: modified
Context
- Work items: AB#637954
- Labels: AL: Apps (W1), Team: Integrations
- Systems: integration
- From the description: “As of December 2025, Shopify supports expiring offline access tokens with refresh-token rotation.”
Source: metadata of a merged pull request in microsoft/BCApps (bcapps): title, labels, changed paths and counts, with a summary in our words. No source text and no description beyond one short quote (D10, D61).