无法使用 shopify API 和 nodejs 访问 themes.json



我无法使用shopify api和nodejs访问我的开发商店的themes.json。这是我正在做的事情:

app.get('/shopify/examplePage', (req, res) => {
  const { shop, hmac, code, state } = req.query;
  const stateCookie = cookie.parse(req.headers.cookie).state;
  // Verifying Cookie
  if (state !== stateCookie) {
    return res.status(403).send('Request origin cannot be verified');
  }
  // Verifying Hmac
  if (shop && hmac && code) {
    const map = Object.assign({}, req.query);
    delete map['hmac'];
    const message = querystring.stringify(map);
    const generatedHash = crypto
      .createHmac('sha256', apiSecret)
      .update(message)
      .digest('hex');
    if(generatedHash !== hmac){
      return res.status(400).send('HMAC verification failed');
    }
    // Appending Access Token to the shop Url
    const accessTokenRequestUrl = 'https://' + shop + '/admin/oauth/access_token';
    const accessTokenPayload = {
        client_id: apiKey,
        client_secret: apiSecret,
        code
    };
    // Making an API Request And getting an API response
    request.post(accessTokenRequestUrl, {json: accessTokenPayload })
    // Promise for Access Token Response
      .then((accessTokenResponse) => {
        const accessToken = accessTokenResponse.access_token;
        // Request URL for Products
        const apiRequestUrl = 'https://' + shop + '/admin/api/2019-04/themes.json'
        console.log(apiRequestUrl);
        const apiRequestHeader = {
            'X-Shopify-Access-Token': accessToken
        };
        request.get(apiRequestUrl, { headers: apiRequestHeader })
        .then((apiResponse) => {
            let example = JSON.parse(apiResponse);
            res.send(example);
          // End API Response
          res.end(apiResponse)
        }).catch((error) => {
          res.status(error.statusCode).send(error.error.error_descripton)
        });
    }).catch((error) => {
      res.status(error.statusCode).send(error.error.error_descripton)
    })
  } else {
    res.status(400).send('Required parameters missing');
  }
});

有此错误显示对{ngrok}.ngrok.io 的访问被拒绝,而我可以在相同代码的帮助下访问product.json和shop.json

拒绝表示您的 API 密钥没有访问权限。如果这是公共应用,则需要将read_themes添加到范围。如果是私人应用程序,则需要转到应用程序设置并添加主题访问权限。

最新更新