ReferenceErrors
invalid-signature
401 — the app proxy signature on a storefront request did not verify.
https://docs.getenvie.com/errors/invalid-signature · 401 — a request claiming to come through the Shopify app proxy failed signature verification.
On a Liquid storefront, requests to /apps/envie/* are signed by Shopify itself; the API verifies
every one and never skips it.
Frequent causes
- Calling the API origin directly from a Liquid theme. Theme code must call the proxy path on
the shop's own domain (
/apps/envie/…), notapi.getenvie.com— only the proxy adds the signature. (Headless storefronts calling the API origin use a public key instead — that's a different, unsigned surface.) - Reconstructing the proxy URL by hand and dropping the query parameters Shopify signs.
- A stale or forged request — replayed signatures don't verify.
Fix
From Liquid, always call /apps/envie/… and let the components or SDK build URLs (createEnvie()
with no options does the right thing). If you're headless, switch to public mode with a key
instead of imitating the proxy.