Choose a Shopify app architecture around the merchant workflow and integration ownership. Compare the React Router template, hybrid services, custom embedded apps, API-only integrations, and extension-only apps, with a practical production checklist.
Choose Shopify Admin API tokens by permission boundary, not by whether a request starts in a browser. Covers staff access, background jobs, expiring offline tokens, and safe refresh.
I recently connected a third-party app to Cloudflare's OAuth Client. These are my notes from creating the client through a working authorization-code flow.
