Create an authenticated rest api for online store

[vmundhra]

Hello.

I have been trying to figure out a way to create an authenticated rest api for online shops. i.e. only the store that has installed the app should be able to call the rest endpoint from their online store. I have also set up Application proxy for the app. But its seems like that method delivers a liquid template for pages and not JSON. I may be wrong here. All I want to do is that a JavaScript code running inside the online shop (which has installed the app) should be able to call the api and not just any rest client.

What I understand is "/api" route is for front-end components of the app, which will have a session and thus are able to make the call. But what about the online store that has installed my app? Do they have any sort of authenticated tokens, since these shops will have the app installed?

I hope you understand the problem. Pls help.

Thanks,
Vishal