The OAuth Tax of 2026
If you’re integrating with Shopify or Etsy in 2026, the authentication you learned last year is already obsolete. What changed January 1, 2026: Both platforms deprecated their legacy authentication methods. Shopify: Custom apps with permanent Admin API access tokens? Gone. Now you get OAuth 2.0 Client Credentials Grant with 24-hour expiring tokens. Etsy: OAuth 1.0? Deprecated. Now it’s OAuth 2.0 with PKCE, 1-hour access tokens, and 90-day refresh tokens. Neither platform sent a billboard announcing this. The docs changed. The API still responds. But the how is entirely different. ...