Yeah - it’s been on from the start. The challenge is that the code used in the OAuth is a single random code from Shopify. So I cannot actually reinitialize without a unique code from Shopify. Most of the components to get the X-Acces-Token are pulled from URL parameters, an HMAC value and a ShopifyCallbackCode (which I actually capture and store).
The first step is the Authorize and the second step is the OAuth Call Back where the acces-token is sent (and you can only capture it once).