Shopify makes IP allowlisting mandatory for all public apps to curb stolen token abuse
POLICYShopifyredteam/daily · 1 source
- Severity
- Low
- Sources
- 1
What happened
Shopify has made IP allowlisting mandatory for all public apps to limit abuse of stolen API access tokens, announced on 5 November. Enforcement begins on 12 November for apps using bulk operations, timed ahead of merchants' busiest shopping weeks. Developers must specify the public IP addresses their apps use.
For IT people · Written by AI from 1 source · Wrong?
What to do
- Developers of public Shopify apps should specify the public IP addresses their apps use.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
GBHackers
Who and what is in it
Companies