Re: Abridged summary of shopify-app-discuss@googlegroups.com - 14 Messages in 5 Topics

32 views
Skip to first unread message

Ifraz Mughal

unread,
Sep 5, 2012, 9:02:37 AM9/5/12
to shopify-a...@googlegroups.com


On Wed, Sep 5, 2012 at 12:56 PM, <shopify-a...@googlegroups.com> wrote:

Group: http://groups.google.com/group/shopify-app-discuss/topics

    Daniel Ristic <daniel...@gmail.com> Sep 05 01:20AM -0700  

    Hi,
     
    We recently received a lot of Webhook error notifications with error 502,
    and it seems that they have been deactivated for our app as a result
    (Recomatic recommendation app). ...more
    Edward Ocampo-Gooding <edw...@shopify.com> Sep 05 12:15PM +0200  

    Daniel: I’ll ping our ops team about this; sorry about the delay.
     
     
    On Wednesday, 5 September, 2012 at 10:20 AM, Daniel Ristic wrote:
     
    ...more
    mrkschan <mr.k...@gmail.com> Sep 04 09:59PM -0700  

    Is there any update on this issue? I'm wondering how to get the current
    customer behind the Shopify application proxy. I tried passing the
    customer-id into the URL (e.g. ...more
    Travis Haynes <travis....@gmail.com> Sep 04 11:12PM -0700  

    Using a private and public key-pair you could make this very secure. You
    can store the private key securely using Liquid code so it's never revealed
    to the customer. Then all you have to do is sign ...more
    Travis Haynes <travis....@gmail.com> Sep 04 11:16PM -0700  

    Whoops, I meant one of the most common ways to validate data shared between
    the client and server, not to secure it. Securing the data would require
    using something like SSL.
     
    ...more
    mrkschan <mr.k...@gmail.com> Sep 04 11:31PM -0700  

    Let me add one more thing to the trick, i think there should be a nonce
    being added into the signature or otherwise the request can be replayed.
     
    In short, {% assign signature = customer.id + ...more
    Travis Haynes <travis....@gmail.com> Sep 04 11:34PM -0700  

    As long as you're validating the proxy request is coming from Shopify, that
    shouldn't be an issue. But, if you do feel it's necessary, the best
    practice is to use a timestamp.
     
    ...more
    KSChan <mrks...@gmail.com> Sep 05 03:20PM +0800  

    If the signature is {{ customer.id + time + salt | md5 }}, an action can
    still be replayed even if I check the signature from Shopify.
     
    Consider the scenario, in a page that render a form to post a ...more
    Max <songhy...@gmail.com> Sep 04 03:55PM -0700  

    Hi, is there anyone who has an idea to make bulk product update using
    specific field? i mean for example i have 1000 product and every
    product have images, description, sku, variant, price ..so ...more
    Dave <hunk...@gmail.com> Sep 04 04:36PM -0700  

    If you have 1000 Products, and you want to update all of them, using the
    API, then you need to ask for all 1000 of your products. Since the API will
    give you them 250 at a time, that means 4 API ...more
    Alexandre Saiz Verdaguer <a...@alexandresaiz.com> Sep 05 01:42AM +0200  

    Take a look at fastprice app. (already on the appstore). This app is for product price updates but I'm sure we could tweak it in order to help you update stock and sku/eans.
     
    Alexandre Saiz ...more
    Mark Shteiman <shte...@gmail.com> Sep 04 06:52AM -0700  

    Is there way to ask for feedback from shop owners (we already published the
    app in the Beta category).
    Tnx
    ...more
    Jessica Bredschneider <jessica.br...@gmail.com> Sep 04 06:23AM -0700  

    Great feedback everyone! Keep it coming.
     
    I was just curious how many of you know about and/or use the tutorials that
    are available? If you used them, did you find them succinct? Did they ...more

You received this message because you are subscribed to the Google Group shopify-app-discuss.
You can post via email.
To unsubscribe from this group, send an empty message.
For more options, visit this group.

--
 
 
 

Reply all
Reply to author
Forward
0 new messages