Admin API requires client ID and client Secret

[mtdvlpr]

They way you've currently setup the Admin API is by providing a static access token. This won't work, because the correct auth flow is to use the client id and client secret to request an access token that's valid for 24 hours. After that, you have to refresh the access token with the client id and secret again.

https://shopify.dev/docs/apps/build/authentication-authorization/access-tokens/client-credentials-grant

[freb97]

Hey @mtdvlpr, i think you are confusing two different things here, the auth flow you are mentioning belongs to building Shopify Apps, this repo is for building headless storefronts with the Admin GraphQL API.

If you want to build shopify apps with nuxt i suggest you check out this repo: https://github.com/kiriminaja/shopify-app-nuxt
Otherwise, you can see how to obtain a permanent Admin API access token in the documentation: https://shopify.dev/docs/apps/build/authentication-authorization/access-tokens/generate-app-access-tokens-admin

[freb97]

@mtdvlpr oh but as i see this kind of auth flow has been deprecated? So maybe we should really support a client id and secret auth flow... I will look into this, keeping the issue open for now

[hybes]

yeah, I've just got a new store and essentially have no way to access the admin API using this nuxt module - as per their docs it does now say 'Starting January 1, 2026, you won't be able to create new legacy custom apps.'

so I suppose, until we have support for this client ID and secret auth flow, we are out of luck

[freb97]

@hybes but won't you able to use an offline access token? It seems per the Shopify docs it's still possible and not deprecated to obtain a non-expiring token: https://shopify.dev/docs/apps/build/authentication-authorization/access-tokens/offline-access-tokens

[freb97]

I implemented the client credentials grant and released and tested version 0.4.5, so the Admin API is now usable with the app client ID and client secret.
Thanks for letting me know, guys! And if anything doesn't work feel free to re-open the issue of course