Introduction to Web Bot Auth
Shopify has introduced Web Bot Auth with HTTP message signatures, enabling merchants to securely authorize their custom crawlers, scripts, or tools to access public Shopify online stores. This functionality is particularly useful for automated processes and audits.
Why Use Web Bot Auth?
Web Bot Auth is designed to help merchants who rely on automated first-party or third-party tools for tasks like:
- Accessibility and SEO audits to ensure optimal store performance.
- Automated testing for smoother functionality and bug identification.
- Data analysis for business insights and growth strategies.
By authorizing tools, merchants can prevent these activities from being inadvertently blocked, ensuring seamless access and operation.
How to Manage Signatures in Shopify Admin
Managing your HTTP message signatures is straightforward within the Shopify admin. You can:
- Create custom signatures with unique names.
- Set expiration dates for added security and control.
- Modify or remove signatures anytime.
These measures provide flexibility and enhanced security for your store automation tools.
Setting Up HTTP Headers in Your Tools
To utilize a signature, configure your tool with the following HTTP header names and values:
- Signature-Input: Defines the input components for generating the signature.
- Signature: Contains the cryptographic signature for authentication.
- Signature-Agent: Indicates the agent or tool using the signature.
Refer to Shopify's documentation to learn more about properly setting up headers for your specific tools.
Conclusion
Web Bot Auth provides a powerful way to streamline automation while maintaining security and accessibility. Start leveraging this feature to optimize your workflows and keep your tools connected seamlessly.