From 527f99bb6e675e833399dcc87561482647e449fb Mon Sep 17 00:00:00 2001
From: Malek Tellissi <malek@tellissi.com>
Date: Fri, 11 Sep 2026 03:15:02 +0200
Subject: [PATCH] Set explicit redirect_uri in Shopify OAuth install URL

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
---
 app/Http/Controllers/ShopifyInstallController.php | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/app/Http/Controllers/ShopifyInstallController.php b/app/Http/Controllers/ShopifyInstallController.php
index 12a57d0..4dc16e7 100644
--- a/app/Http/Controllers/ShopifyInstallController.php
+++ b/app/Http/Controllers/ShopifyInstallController.php
@@ -21,9 +21,12 @@ class ShopifyInstallController extends Controller
 
     public function install()
     {
+        $callback = 'https://sms.spices.blue/shopify/callback';
+
         $url = "https://{$this->shop}/admin/oauth/authorize"
             . "?client_id={$this->clientId}"
             . "&scope={$this->scopes}"
+            . "&redirect_uri=" . urlencode($callback)
             . "&state=spicesetup";
 
         return redirect($url);