--- title: Shop SDK lead capture now supports Rich Authorization... description: Shop SDK lead capture now supports Rich Authorization Requests (RAR), letting apps specify exactly which profile fields they need. Developers can mark fields... canonical: https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0 twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Shop SDK lead capture now supports Rich Authorization Requests | daily.dev og:description: Shop SDK lead capture now supports Rich Authorization Requests (RAR), letting apps specify exactly which profile fields they need. Developers can mark fields... og:url: https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0 og:image: https://api.daily.dev/og/posts/u4bqGEtd0.png og:image:alt: Shop SDK lead capture now supports Rich Authorization Requests og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Shop SDK lead capture now supports Rich Authorization Requests **[Shopify Developer changelog](https://daily.dev/sources/shopifychangelog)** · 3 min read · 0 upvotes · 0 comments ## Summary Shop SDK lead capture now supports Rich Authorization Requests (RAR), letting apps specify exactly which profile fields they need. Developers can mark fields like phone number and birthdate as required or optional using a serialized JSON array passed to an authorization attribute. Supported fields include given name, family name, phone number, and birthdate. Existing integrations keep working unchanged since RAR is opt-in, and apps need a client secret plus a trusted server to read the requested data. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How do I request a specific profile field like birthdate as optional in Shopify Shop SDK lead capture? Pass a serialized JSON array of authorization details when creating the lead capture instance, using the Rich Authorization Requests format. Each entry specifies a type of 'urn:shopify:shop_app:data-sharing:v1' and a datatypes array listing fields like 'phone_number' or 'birthdate' with a required boolean. For example, setting phone_number required true and birthdate required false requires the phone number while letting users skip birthdate. _Teams wiring up Shopify lead capture track changelog details like this through daily.dev._ ### What happens if a user declines to authorize data sharing in Shopify's Shop SDK lead capture with RAR? The resulting object does not include a consent token, even if the user goes on to sign in to the store. Apps should handle a missing consent token as an expected outcome rather than an error, since users can decline authorization for optional and even required fields during the flow. _Developers handling edge cases in OAuth-style consent flows follow updates like this on daily.dev._ ### Which profile fields can I request with Shopify's Rich Authorization Requests in Shop SDK lead capture? Given name, family name, phone number, and birthdate can be requested through Rich Authorization Requests. This expands beyond the existing OAuth scopes for names and phone numbers, which only read existing values without prompting users to fill in missing ones. A trusted server with a client secret is required to read the data returned. _Developers evaluating Shopify integration scopes keep tabs on API changes like this via daily.dev._ ## Similar posts on daily.dev - [The Art of Consent Management in the OAuth World](https://daily.dev/posts/the-art-of-consent-management-in-the-oauth-world-eel120qoo) · Auth0 · 1 upvotes · 0 comments - [Mass Assignment and the Identity Drift: From Profile Edit to Insurance Takeover](https://daily.dev/posts/mass-assignment-and-the-identity-drift-from-profile-edit-to-insurance-takeover-rurtfpylt) · InfoSec Write-ups · 0 upvotes · 0 comments - [Merchants now see partner details on collaborator requests](https://daily.dev/posts/merchants-now-see-partner-details-on-collaborator-requests-lk9mfhbtv) · Shopify Developer changelog · 0 upvotes · 0 comments - [Contact Picker: Privacy-First Contact Sharing](https://daily.dev/posts/contact-picker-privacy-first-contact-sharing-wifebwoap) · Android Developers Blog · 0 upvotes · 0 comments - [Enhance Security and Trust: New Session Metadata in Sign in with Google](https://daily.dev/posts/enhance-security-and-trust-new-session-metadata-in-sign-in-with-google-afp4ma6rq) · Google Developers · 0 upvotes · 0 comments --- Tags: [#architecture](https://daily.dev/tags/architecture), [#authorization](https://daily.dev/tags/authorization), [#oauth](https://daily.dev/tags/oauth), [#shopify](https://daily.dev/tags/shopify) [View this post on daily.dev](https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Shop SDK lead capture now supports Rich Authorization Requests","url":"https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0"},"datePublished":"2026-10-29T17:39:16.806Z","dateModified":"2026-10-29T17:44:57.769Z","description":"Shop SDK lead capture now supports Rich Authorization Requests (RAR), letting apps specify exactly which profile fields they need. Developers can mark fields...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a5b9f0de82c011d79696b4f6b99b7364?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a5b9f0de82c011d79696b4f6b99b7364?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Shopify Developer changelog","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Shopify Developer changelog","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/aefcb5d2c1ca4b45b5d2256b9e2a9cc3","url":"https://daily.dev/sources/shopifychangelog"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"architecture,authorization,oauth,shopify","timeRequired":"PT3M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Shopify Developer changelog","item":"https://daily.dev/sources/shopifychangelog"},{"@type":"ListItem","position":3,"name":"Shop SDK lead capture now supports Rich Authorization Requests"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/shop-sdk-lead-capture-now-supports-rich-authorization-requests-u4bqgetd0#faq","mainEntity":[{"@type":"Question","name":"How do I request a specific profile field like birthdate as optional in Shopify Shop SDK lead capture?","acceptedAnswer":{"@type":"Answer","text":"Pass a serialized JSON array of authorization details when creating the lead capture instance, using the Rich Authorization Requests format. Each entry specifies a type of 'urn:shopify:shop_app:data-sharing:v1' and a datatypes array listing fields like 'phone_number' or 'birthdate' with a required boolean. For example, setting phone_number required true and birthdate required false requires the phone number while letting users skip birthdate. Teams wiring up Shopify lead capture track changelog details like this through daily.dev."}},{"@type":"Question","name":"What happens if a user declines to authorize data sharing in Shopify's Shop SDK lead capture with RAR?","acceptedAnswer":{"@type":"Answer","text":"The resulting object does not include a consent token, even if the user goes on to sign in to the store. Apps should handle a missing consent token as an expected outcome rather than an error, since users can decline authorization for optional and even required fields during the flow. Developers handling edge cases in OAuth-style consent flows follow updates like this on daily.dev."}},{"@type":"Question","name":"Which profile fields can I request with Shopify's Rich Authorization Requests in Shop SDK lead capture?","acceptedAnswer":{"@type":"Answer","text":"Given name, family name, phone number, and birthdate can be requested through Rich Authorization Requests. This expands beyond the existing OAuth scopes for names and phone numbers, which only read existing values without prompting users to fill in missing ones. A trusted server with a client secret is required to read the data returned. Developers evaluating Shopify integration scopes keep tabs on API changes like this via daily.dev."}}]} ```