Third party api authorization with Shopify's customer id

[yuzushioh]

Hi everyone!

I'm just wondering how I should achieve when I want to use Shopify's customer id to find out who's requesting to third party api (for example, a product review app where reviews are stored by customer ids). Even if third parties provide storefront api for the requests, they can't make sure if the customer id matches the actual requesting customer's id.

Shopify adds customer id automatically in the app proxy feature for theme developers. https://shopify.dev/changelog/app-proxy-requests-include-new-parameter-for-the-logged-in-customer-id

Does hydrogen provide anything similar to that?

[davidhousedev]

It sounds like you need to implement user sign-in (authentication), in order to grant additional access to users on their own content (authorization). This is a fairly complex process, but I think there is an example of it in the Hydrogen demo store. Have you taken a look at that?