diff --git a/src/Osiset/BasicShopifyAPI/BasicShopifyAPI.php b/src/Osiset/BasicShopifyAPI/BasicShopifyAPI.php
index <HASH>..<HASH> 100755
--- a/src/Osiset/BasicShopifyAPI/BasicShopifyAPI.php
+++ b/src/Osiset/BasicShopifyAPI/BasicShopifyAPI.php
@@ -354,7 +354,7 @@ class BasicShopifyAPI implements SessionAware, ClientAware
             // Grab the HMAC, remove it from the params, then sort the params for hashing
             $hmac = $params['hmac'];
             $params = array_filter($params, function ($v, $k) {
-                return in_array($k, ['code', 'shop', 'timestamp']);
+                return in_array($k, ['code', 'shop', 'timestamp', 'state', 'locale', 'nonce', 'protocol']);
             }, ARRAY_FILTER_USE_BOTH);
             ksort($params);
Add other potential HMAC parameters

Shopify may have other parameters to be included in the HMAC calculation.  



Discussion: <URL>