Hello,
I can successfully verify the oauth hmac. However, I am trying to reject a request as a test and whenever I return an error from my redirect_uri the app still gets installed on my test store. I have tried returning HTTP 400 and HTTP 500, but still the same.
From the docs, https://docs.shopify.com/api/authentication/oauth:
"Before you proceed, make sure your application performs the following security checks. If any of the checks fails, your application must reject the request with an error, and must not proceed further."
How do I reject the request?
Thanks in advance for the help.