ID Token API

The ID Token API retrieves an OpenID Connect ID Token from Shopify as a JWT string. Your backend can verify this token to confirm that a request came from an authenticated Shopify user.

In most cases, you don't need to call this method directly. App Bridge's fetch interceptor automatically includes the ID token in the Authorization header for requests to your app's domain. Use shopify.idToken() directly when you need the token for something other than a standard fetch request, such as a WebSocket connection or a third-party API call.

For more information, see the session token documentation.

Anchor to Use casesUse cases

Backend authentication: Verify requests to your backend are from a Shopify-authenticated user.
Session validation: Validate user sessions without requiring traditional cookie-based authentication.
Secure communication: Exchange ID tokens for secure communication between your app frontend and backend.
Third-party auth: Pass ID tokens to third-party services that support OpenID Connect verification.

Anchor to IdTokenApi
IdTokenApi()

The idToken API is available on the shopify global. It returns a Promise that resolves to a JWT string.

Anchor to IdTokenApi-returnsReturns

Promise<string>

Examples

js

const token = await shopify.idToken();

// => 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...'

Examples

Description
Retrieve an ID token from Shopify. The returned value is a JWT string that your backend can verify to authenticate the request.
js
```
const token = await shopify.idToken();
// => 'eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9...'
```
Description
Pass the ID token when opening a WebSocket connection to your backend. This is a common use case for calling `shopify.idToken()` directly, since the fetch interceptor only handles standard fetch requests.
js
```
const token = await shopify.idToken();

const socket = new WebSocket(
  `wss://your-app.example.com/ws?token=${token}`
);
```

Was this page helpful?

Anchor to Use casesUse cases

Anchor to IdTokenApiIdTokenApi()

Anchor to IdTokenApi-returnsReturns

Anchor to IdTokenApi
IdTokenApi()