Offline access tokens now support expiry and refresh
UpdateUnverifiedAdded Sep 24, 2026
Offline access tokens now can optionally expire after 60 minutes and come with a refresh token. You can use the refresh token to obtain a new offline access token without requiring merchant interaction. This update aligns our process with the OAuth 2.0 specification and enhances security.
Topics: Security, Developer tools
More Shopify developer platform releases
Every Shopify developer platform release| Date | Release | Type |
|---|---|---|
| Dec 10 | The Winter '26 Edition is hereunverified Update | Update |
| Dec 10 | New fields to combine bundle optionsunverified Update | Update |
| Dec 10 | ShopifyQL Python SDK and CLI now available for analyticsunverified Update | Update |
| Dec 10 | Monitor admin performance issues by region with Web Vitals APIunverified Update | Update |
| Dec 10 | Introducing Sidekick app extensionsunverified Update | Update |
| Dec 10 | Simplified App Store requirementsunverified Update | Update |
| Dec 10 | Multi-environment theme commands in Shopify CLIunverified Update | Update |
| Dec 10 | A more powerful Dev Assistant on shopify.devunverified Update | Update |
Also shipped on Dec 10, 2025
Shopify in December 2025| Date | Company | Release | Product | Type |
|---|---|---|---|---|
| Dec 10 |  Cloudflare | AI Crawl Control - Pay Per Crawl (Private beta) - Discovery API, custom pricing, and advanced configurationunverified | Cloudflare developer platform | Beta |
| Dec 10 |  New Relic | Introducing the Cross-cluster UI Public Previewunverified | New Relic | Preview |
| Dec 10 |  Okta | Requesting App for Cross App Access (XAA) is now available in Betaunverified | Auth0 | Beta |
| Dec 10 |  Cerebras | Added support for prompt caching, which automatically stores and reuses prompt prefixes to reduce latency and...unverified | Cerebras Inference | Update |
| Dec 10 |  Deepgram | Container Images (release 251210)unverified | Deepgram | Update |
| Dec 10 | Deepgram | This Release Contains The Following Changesunverified | Deepgram | Update |
Sources: each vendor's own release notes, changelogs and GitHub releases, read daily to monthly by how often it posts. Logos via logo.dev; trademarks belong to their owners.