bundle-offers-app/shopify.app.toml
metatroncubeswdev 38c03cd1ae Encrypt order data at rest; add terms of service with data processing terms
Protected customer data (Level 1): order ids are stored as keyed HMACs, order numbers
and ids for admin links as AES-256-GCM ciphertext (DATA_ENCRYPTION_KEY). New public
/terms page with processor terms; privacy policy links to it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
2026-10-14 10:29:48 -04:00

57 lines
1.6 KiB
TOML

# Offerlyst — Shopify app configuration.
# Learn more about configuring your app at https://shopify.dev/docs/apps/tools/cli/configuration
client_id = "af9c6c54f9e8787305e113428d6d956e"
name = "Offerlyst: Bundles & BOGO"
handle = "offerlyst"
application_url = "https://bundles.metatronlabz.com"
embedded = true
[build]
# keep production URLs from being overwritten by `shopify app dev`
automatically_update_urls_on_dev = false
[access_scopes]
# Brief §15 + write_app_proxy (required by Shopify for the app proxy). read_orders: analytics. write_files: offer images.
scopes = "read_discounts,read_orders,read_products,read_themes,write_app_proxy,write_discounts,write_files"
[auth]
redirect_urls = ["https://bundles.metatronlabz.com/auth/callback"]
[app_proxy]
# Storefront: https://{shop}/apps/bundles and /apps/bundles/{handle}
url = "/proxy"
subpath = "bundles"
prefix = "apps"
[webhooks]
api_version = "2026-10"
[[webhooks.subscriptions]]
uri = "/webhooks/app/uninstalled"
topics = ["app/uninstalled"]
[[webhooks.subscriptions]]
topics = ["app/scopes_update"]
uri = "/webhooks/app/scopes_update"
[[webhooks.subscriptions]]
topics = ["app_subscriptions/update"]
uri = "/webhooks/app/subscriptions_update"
[[webhooks.subscriptions]]
topics = ["orders/create"]
uri = "/webhooks/orders/create"
[[webhooks.subscriptions]]
topics = ["products/update", "products/delete", "collections/delete"]
uri = "/webhooks/catalog"
# Mandatory compliance topics for public apps
[[webhooks.subscriptions]]
uri = "/webhooks/compliance"
compliance_topics = ["customers/data_request", "customers/redact", "shop/redact"]
[pos]
embedded = false