Shopify / Shopify/shopify_python_api
`Certificate verify failed` on `request_token`
Open
Nobody has claimed this yet.
feature request
- Dominant language
- Python
- Stars
- 1.4k
- Forks
- 388
- Avg merge
- 5h 39m
- Merged PRs (30d)
- 1
Description
Looks like Shopify's servers don't handle well TLS v1.2; TLS v1.1 must be used in order to retrieve the access_token correctly without bypassing certificate validation.
We should update the library so that TLS v1.1 is used everywhere, and people don't have to figure it out by themselves.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start at the library's request_token path and trace how TLS settings are applied to the Shopify request. Reproduce the certificate-verification failure before determining the affected call sites; done means access_token retrieval uses TLS v1.1 without bypassing certificate validation.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- api, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100