Shopify makes IP allowlisting mandatory for public apps calling its Admin API
POLICYShopifyredteam/daily · 1 source
- Severity
- Medium
- Sources
- 1
What happened
Shopify is requiring developers of public apps to limit which network addresses can use their connections to its online store systems. This makes it harder for attackers to misuse a stolen digital key, because requests from unapproved locations will be refused.
Like I’m new · Written by AI from 1 source · Wrong?
What to do
- Test the allowlist against recent traffic to confirm legitimate requests are not blocked before turning on enforcement.
- Choose either IP addresses or networks for the allowlist, since saving one type replaces the other.
Written by AI from the sources, checked against them
Full story timeline · 1 update
Who reported · 1 outlet
Cyber Security News
Who and what is in it
Companies
Products