I’m seeing a strange issue after upgrading a Remix app to: shopify-app-remix: ^4.1.0

[ersanjay5991]

Context

App was created about a year ago

Embedded Remix app

Prisma + MongoDB for session storage

Problem

After the upgrade:

App left-side navigation doesn’t load

Admin API requests fail

No clear auth error is thrown

The app only recovers if I manually delete the session record for the shop, which forces re-auth.

After re-auth:

Menu loads

Admin API works

Access token appears to be the same as before

Why this feels wrong

Since the token doesn’t change, it seems like:

Session data might be stale or incompatible

Or session validation behavior changed between versions

Steps to reproduce

Start with an older Remix app

Upgrade @shopify/shopify-app-remix to ^4.1.0

Open the embedded app → menu doesn’t load, API fails

Delete session from DB → re-auth → works

Question

Is there a migration step or breaking change I might have missed for older Remix apps?

Happy to share more details if needed.

[lizkenyon]

Hi there 👋

Did you review the migration guide for version 4?

In version 4.1 we did add a new feature flag to enable expiring offline tokens. The mongo adapter has not yet been updated.

A couple of other questions that might help with debugging

1. Do you have scopes configured in your shopifyApp() config?
2. Are you using token exchange auth (embedded app with unstable_newEmbeddedAuthStrategy: true)?
3. If yes to both - you should remove the scopes field from your config per the managed install recommendations

Otherwise for me to look any further into this, you will need to provide your debug logging.
You can enable with

shopifyApp(
...
logger: {
level: LogSeverity.debug

[ersanjay5991]

Hi @lizkenyon

Thanks lot for the support on this issue.

Yes, reviewed the v4 migration guide.

I’m using an embedded app with unstable_newEmbeddedAuthStrategy: true.

I removed all scopes from shopifyApp() and per managed install recommendations and now define scopes only in the Partner Dashboard.

This resolves the invalid_scopes error, but after the change the auth flow no longer completes and the app fails during installation.

This may be related to v4.1 expiring offline tokens, since the Mongo adapter hasn’t been updated yet. ?