What is the use of OAuth example in Polaris React App Bridge documentation?

Question

Reading documentation here and the code snippet example. Is this meant to consistently check if the user is logged into the embedded app or used for the initial registration/login process?

Also, if I'm already using the AppProvider component, is this even needed? I know AppProvider handles initialization, according to their documentation here.

Here's the example from their documentation:

import createApp from '@shopify/app-bridge';
import {Redirect} from '@shopify/app-bridge/actions';

const apiKey = 'API key from Shopify Partner Dashboard';
const redirectUri = 'whitelisted redirect URI from Shopify Partner Dashboard';
const permissionUrl = `/oauth/authorize?client_id=${apiKey}&scope=read_products,read_content&redirect_uri=${redirectUri}`;

// If the current window is the 'parent', change the URL by setting location.href
if (window.top == window.self) {
  window.location.assign(`https://${shopOrigin}/admin/${permissionUrl}`)

// If the current window is the 'child', change the parent's URL with Shopify App Bridge's Redirect action
} else {
  const app = createApp({
    apiKey: apiKey,
    shopOrigin: shopOrigin,
  });

  Redirect.create(app).dispatch(Redirect.Action.ADMIN_PATH, permissionUrl);
}

Did you ever figure this out? Does that mean permissionUrl is supposed to be the entry point for every merchant using our app (even those that have already installed it)? Is there a method to quickly determine if the merchant has already installed your app to bypass this and instead just create(app)? The only thing I can think of is to do a conditional where I validate the hmac of the initial url from which they're coming and then do a request to the Shopify admin api to see if their access token is valid; if so, I'll just create(app) but if not, then I'll route them to permissionUrl. — policenauts, Jun 19 '20 at 20:20

score 1 · Accepted Answer · answered Feb 10 '19 at 12:18

I discovered that page weeks after I had implemented the oauth journey and was similarly confused about its use.

But now I know that I'll use their example in the scenarios when a user is about to use a feature that requires permissions that they have not given to the app before and I need to redirect them to the authorization page. I tried a simple redirect and of course the loading of admin page was forbidden because I was still in the iframe.

What is the use of OAuth example in Polaris React App Bridge documentation?

1 Answers1