HSTS is HTTPS Strict-Transport-Security. It enforces that only HTTPS is used across your web application, preventing unencrypted traffic being monitored and collected by unwanted entities. HSTS in Hydrogen It can be enabled in your Hydrogen app via r...
Shopify, by default, does not have pre-configured methods to authenticate customers via their Google accounts. In a Shopify theme environment, there are numerous apps you could use to accomplish social sign-in. But what about headless stores?! In thi...
Building Custom Authentication Forms: Migrating to Email/Password Authentication
How to Use Ngrok Tunnel Domain for Hydrogen Authentication Locally
Content Security Policy (CSP) is a crucial tool in web development that can make or break your site’s security. If you’ve spent time debugging font loading issues or mysterious errors while working with 3rd party imports, you’ve likely bumped into CS...
A common bug in Hydrogen is getting this "redirect_uri" mismatch error upon user sign-in. The official Shopify documentation for user authentication is not very helpful on this. So I will be sharing my own, simple solution. There are 2 primary fixe...
