shopify / shopify-cli-example-app Goto Github PK

I handled the case when a user starts the OAuth process, clicks the button to install the app, gets redirected to subscription page and declines the charge, by checking if the user has an active subscription on every page request.

But my app functionality mostly relies on the theme-app-extension, which means even if I block a use from using my app if they are not subscribed, they will be able to go to the theme editor, activate and use the extension injected by my application.

Is this a behaviour that only happens on development stores or on production stores too?
I understand that some developers might be happy that the app is still installed even if the users do not complete the billing process, because the user might come back and finish it.

Is there any solution for my case? Or do I have to use App Proxy and make calls from the theme-app-extension to verify that the merchant is actually subscribed? Even though this might slightly affect performance and put more load on my server.

Thank you guys