More resilient refreshes for expiring offline access tokens
Shopify developer change
MerchantDiff detected this entry in Shopify's official developer changelog on August 28, 2026.
This Shopify update is categorized as API, Update, GraphQL Admin API, Admin REST API.
What changed
Previously, after an app used a refresh token, it could retry that token for up to 60 minutes. If the app didn’t receive or save the newly returned access token and refresh token, the previously stored refresh token could no longer be used after that window. Now, an app can retry its previously stored refresh token until it starts using the replacement refresh token. This gives the app a recovery path after a lost response or storage failure. The recovery period is limited to 30 days from the original refresh token’s first use and doesn’t extend the token beyond its normal 90-day lifetime.
Who is affected
Apps that use expiring offline access tokens. It doesn’t require a new API version, configuration change, or opt-in. Apps that don’t use expiring offline access tokens aren’t affected.
What action may be needed
No migration is required if your app is already using expiring offline access tokens. Continue to: Serialize refresh operations for each shop. Persist each returned access-token and refresh-token pair atomically. Use the newest refresh token for future refreshes.
Use the official Shopify entry below as the source of truth for technical implementation details, affected APIs, migration instructions and deadlines.
Want the actionable version?
MerchantDiff monitors Shopify API changes, deprecations, deadlines and ecosystem updates, then turns them into developer-focused release intelligence: what changed, who is affected and what action may be needed.
Get MerchantDiff →