verify-customer-ui-extension-session-token.rb

# This code can be used to decode the session token coming from the
# Customer UI extension: https://shopify.dev/docs/api/customer-account-ui-extensions/2024-10/apis/session-token

require 'jwt'
require 'json'

# Replace with your app's client secret from the Partner Dashboard
SHOPIFY_CLIENT_SECRET = "XXX"

# Token present in the Authorization header of the request
token = "yyyy"
decoded_token = JWT.decode(token, SHOPIFY_CLIENT_SECRET, true, { algorithm: 'HS256' })

# Shopify's session token payload is in the first element of the array
payload = decoded_token[0]

# Example: Log the customer id or destination shop
puts "Verified session for shop: #{payload['dest']}"