Is there a way to add extensions to secure checkout only domains. Ex: In case of different domains : extensions deployed on shopping domain ssp are executed on checkout domain ssp as well via domain bridging but for cases when timeout happens and users visit bookmarked myaccount links , navigation to my account link is an unbridged application bridged to {accountID}.com as its shopping domain.

I’m not following exactly what you’re asking but there are a couple of things you can do. One is in the manifest, which is where you can determine whether the extension applies to shopping, myaccount or checkout — so you can just remove the one for the shopping domain if you don’t need it. The other is to perform a check whether the customer is logged in first before rendering or doing whatever it is your extension does; if it’s important that they’re logged in first then you can just redirect them to the login page if they’re not.