Building an embedded Shopify app in Symfony: session tokens, token exchange, and the parts nobody writes in PHP

Shopify's app documentation has exactly one first-class path: Node, the

official CLI, and a Remix template that wires authentication for you.

Pick any other language and you leave the paved road at the first turn,

because everything interesting happens before your framework's router

sees the request: the app runs in an iframe inside the Shopify admin, the