https://vini.dev-bsmn.com
https://vini.dev-bsmn.com/auth/callback
Under Access / Scopes, select Admin API scopes including at least read_products, read_orders, etc.
Uncheck Embed app in Shopify admin (backend app).
c3a719011456758f254d91a2a58fb9eb
Copy Client ID and Secret into .env — already done if install runs.
https://vini.dev-bsmn.com/auth/install?shop=YOUR-STORE.myshopify.comshpat_ token and non-empty scopesManaged scopes (Dev Dashboard default): OFF — scopes come from your app Version, not the OAuth URL.
To pass scopes in the OAuth URL instead, set SHOPIFY_USE_MANAGED_SCOPES=false and enable Use legacy install flow in your app version.