What’s New at Shopify?

We’ve recently rolled out a change that enables continuous authentication from cart to checkout, allowing authenticated customers to navigate to a logged-in checkout experience without the need to enter their credentials again.

To enable this, please append the customerAccessToken into the Buyer Identity object of the Storefront API Cart and include the buyer IP address when making server side requests.

Note that for security reasons, the checkoutUrl should be requested when the buyer is ready to navigate to checkout, which can be re-requested if needed.

For merchants building mobile apps with the Checkout Sheet Kit, see this detailed guide to create authenticated checkout experiences for buyers within mobile apps. Previously, opening an authenticated checkout was only possible using multipass, which is limited to Shopify Plus plans and legacy customer accounts. Now, authenticated checkouts are possible for merchants on all plans and customer account versions.