Stay up to date

Developer changelog

API

Apps now need Shopify approval to read orders older than 60 days

Effective July 09, 2018

Action required

Deprecation

Shopify is introducing an important change to the Order resource to help preserve the trust that merchants have when using third-party apps.

As of today, public apps will no longer be able to access a merchant’s orders older than 60 days with the current read_orders or write_orders access scopes. Apps that require access to all of a merchant’s orders will first need to be approved by Shopify. After Shopify approves the request, the app can begin using the new read_all_orders scope.

You can request approval to read orders older than 60 days in the Partner Dashboard. After your request is approved by a Shopify admin and you've been notified that your app was granted access, you must update your app to request the new read_all_orders access scope during authorization by July 9, 2018. If you don't update your app to use the new scope, then you won't be able to access orders older than 60 days after July 9. Note that you must use the new read_all_orders scope along with either the read_orders or write_orders scope.

These changes will help assure merchants that their data is safe with your app and with Shopify. By being mindful of what data apps need to access, and making sure merchants are fully aware of what scopes are being granted to their apps, we’ll build a strong and trusting app ecosystem.

To learn more about the, see Increase Merchant Trust: Introducing Updates to the Shopify Order API.

If you have any questions or concerns, then email read-all-orders-request@shopify.com.

Edit:

Many pre-approved apps viewing orders older than 60 days have now been migrated to have the new permission automatically. If your app is one of them you will receive an email from the Shopify Apps Team today.

Edit:

Private apps are not affected by this change and automatically will have the read_all_orders scope.

The majority of apps that were previously accessing orders older than 60 days have been grandfathered into the new permission. You'll still need to add the new scope to your OAuth flow. There will be an email sending out shortly to your registered e-mail if your app is included in this list. You can also check this in the App Setup section of the Partners Dashboard, you'll either see a section to request all orders access or a a status message that says "Your app can access the full order history for a store."