Walmart Delegated Access to OAuth 2.0 Migration Kit for Shopify Integrations
Walmart Delegated Access to OAuth 2.0 Migration Kit for Shopify Integrations specification
Dependencies, compatibility, limitations, and licensing for developers who want to inspect the kit before purchase.
Version 1.0.4 · Updated 11 Sept 2026
Compatibility
- Runtimes
- Node.js 22.12+
- Frameworks
- Framework-neutral (minimal Node server example included)
- Libraries
- No required Walmart client library (injected transport boundary)
- API versions
- Walmart Marketplace US OAuth 2.0 (App Store authorization-code flow), Walmart Delegated Access (legacy detection and transition source)
- Requirements
- Approved Walmart Solution Provider status or active approval/publication process, Registered Walmart App Store application with login and callback URLs, Buyer-owned secure key management and persistent store for refresh tokens, Seller reconnection through the Walmart App Store for each migrated connection, Existing custom connector code that authenticates Walmart Marketplace API calls
- Skill level
- Intermediate TypeScript, Walmart Marketplace API authentication, and host persistence integration
Best fit
- Custom Node.js/TypeScript Shopify-to-Walmart connectors
- Approved Solution Providers with an App Store application or publication in progress
- Teams migrating seller-by-seller before Delegated Access stops working at the end of September 2026
Not a fit
- Shopify Marketplace Connect or another managed provider owns the Walmart connection
- You do not own custom connector code that authenticates Walmart Marketplace API calls
- You are not an approved Walmart Solution Provider and have no active approval or publication process
- Direct-seller credentials, non-US marketplaces, or supplier and first-party authentication models
- Buyers expecting a hosted OAuth service, automatic seller migration, or buyer-specific implementation
May require adaptation
- Non-TypeScript hosts that cannot adapt reference code
- Host-specific persistence, key management, seller mapping, and deployment conventions
Not included
- Walmart Solution Provider approval or App Store publication
- A hosted OAuth callback, credential vault, database, or KMS service
- Shopify OAuth, sessions, webhooks, or product/order/inventory business logic
- Automatic seller outreach, consent, or Seller Center automation
- Dual writes, traffic mirroring, or automatic cutover
- Buyer-specific implementation, deployment, or ongoing support as a service
Integration notes
- Run the detector before editing host code; never auto-migrate on heuristic matches alone.
- Bind OAuth state to an authenticated host account before redirecting sellers to Walmart.
- Persist refresh tokens only through the encrypted store boundary; cache access tokens in memory.
- Cut over one seller at a time after Token Detail scope verification and operator approval.
- If your managed provider already migrated or you do not control connector authentication, this kit is not required.
- AI-ready documentation and agent instructions included.
How it works
- Complete checkout or accept the terms and download a free kit
- Download the source ZIP
- Review the docs, examples, and AI Integration Pack
- Adapt the kit into your project, application, or store with AI assistance or technical help as needed
Review before production
This product is provided as reusable source code to accelerate development. It is not supplied as a finished production system and should not be deployed to production without review, testing and adaptation to your specific application. You are responsible for validating the code, security, compatibility, data handling and business logic before production deployment.
Silver Vault Project is independent and is not affiliated with or endorsed by Shopify Inc. or Walmart Inc. Shopify is a trademark of Shopify Inc. Walmart and Walmart Marketplace are trademarks of Walmart Inc.
Support
Product support covers defects in the supplied code and documentation questions. Custom integration and application debugging are available separately. [email protected]