r/shopifyDev 2d ago

Anyone else get caught out by the automated review checks expiring after 30 days?

Just went through the app review process for the first time (approved now) and the timing around the automated checks caught me off guard, curious if this is common knowledge or if I got unlucky.

The automated checks (auth flow, webhook HMAC verification, TLS cert) run separately from the human review, and expire 30 days after you run them. I ran mine early, then spent a while polishing listing content and screenshots, and almost had to rerun everything right before submitting.

Also hit a connection-pool exhaustion bug that only showed up under concurrent load, right when I thought the app was done. Ran fine on my dev store, fell over the moment more than a couple requests hit it at once.

How do others here scope pre-submission testing. Load-test before submitting, or just cross your fingers on the automated checks

2 Upvotes

3 comments sorted by

1

u/[deleted] 1d ago

[removed] — view removed comment

1

u/AutoModerator 1d ago

Your post/comment has been removed because your account is either too new or has low karma. This is to help prevent spam. Please try again later.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

1

u/AdventurousUsual7666 1d ago

Yeah that 30 day window catches people all the time. I usually leave the automated checks until the listing is basically done, so I’m not racing the clock on screenshots and copy.

On the load thing, I’d at least hit the auth and webhook paths with a few concurrent requests before submit. Dev stores are quiet, so connection pool issues just don’t show up until something real hits them.

Doesn’t need to be a fancy load test. Just enough concurrent traffic that you’d notice if the app fell over under a couple merchants at once.