All API requests require session token authentication via Shopify App Bridge.
Authorization: Bearer {session_token}
Content-Type: application/json
POST /api/shopify/app/verify-session.php
Verifies Shopify session token.
GET /api/shopify/app/data.php
Returns dashboard statistics and data.
LoyalChamp listens to the following Shopify webhooks:
orders/create - Creates payment recordsorders/paid - Records paymentscustomers/create - Auto-adds memberscustomers/update - Updates member infoAPI endpoints are rate-limited to 60 requests per minute per IP address.