Shopify bridge setup

What this bridge does

• Merchant creates a manual Shopify payment method named Secure Card Payment.
• Customer places the Shopify order using that manual method.
• Shopify sends an orders/create webhook to the gateway.
• The gateway validates the order, restricted-item rules, merchant token, and connected account.
• The gateway creates a hosted payment checkout and stores a Shopify payment session.
• Processor webhooks reconcile paid, failed, expired, and cancelled states back to the bridge ledger.

Merchant setup

1. Get the merchant's Payment Gateway API Base URL and Merchant Token.
2. In Shopify, create a custom/manual payment method named Secure Card Payment.
3. Set payment instructions to tell customers they will receive or open a secure payment link after placing the order.
4. Create a Shopify custom app with Admin API access to read orders and webhooks.
5. Register the shop with the gateway using the endpoint below.
6. Create an orders/create webhook pointing at the webhook URL returned by registration.

Register shop endpoint

POST https://api.noramp.dev/shopify/register-shop
Authorization: Bearer <merchant_token>
Content-Type: application/json

{
  "shop_domain": "merchant-store.myshopify.com",
  "admin_access_token": "shpat_...",
  "scopes": "custom_app_admin_token"
}

The response includes the Shopify orders/create webhook URL and the required manual payment method name.

Webhook URL

Shopify signs this webhook with the Shopify app secret. The gateway rejects unsigned or incorrectly signed requests.

Current limitation

This is a bridge, not a native Shopify payment app. It cannot replace Shopify's native checkout payment selector or automatically capture funds inside Shopify checkout. It creates and reconciles the offsite payment link from Shopify order webhooks.