Test RevWatch on a Shopify dev store

Before App Store submission, validate OAuth install on a development store.

1. Create a Shopify Partner app

1. Go to partners.shopify.com → Apps → Create app
2. Choose Public app (custom for now)
3. Set App URL: http://localhost:3001 (dev) or your Cloud Run URL
4. Allowed redirection URL: http://localhost:3001/api/shopify/callback
5. Scopes: read_products, read_inventory, read_orders

2. Configure .env

SHOPIFY_API_KEY=your_client_id
SHOPIFY_API_SECRET=your_client_secret
APP_URL=http://localhost:3001

3. Connect from dashboard

1. Run npm run dev
2. Sign up / log in → Dashboard
3. Enter your-dev-store.myshopify.com → Connect store
4. Approve OAuth on Shopify → redirected back with "Shopify connected"

4. What gets tested

• OAuth token exchange and secure storage
• Public + authenticated store scan
• Leak score, findings, and alerts on dashboard

5. App Store submission (when ready)

• Update shopify.app.toml with production URLs
• Deploy to HTTPS (Cloud Run / GCP)
• Run Shopify app review checklist (privacy policy, support email, listing copy)
• Submit via Partner Dashboard

← Back to dashboard