v2

OpenAPI 3.0.3Proprietary2026-07-263483431.1 MB

Customer Auth

Blacklist customer JWTs

Public storefront endpoint. Revokes the supplied customer tokens. When a tracked refresh token is supplied, the refresh-token family is revoked so later refresh attempts fail.

post/v3/stores/{store_id}/public/auth/jwt/blacklist

Path parameters

store_idstring required

Store unique_id.

Headers

X-Scalev-Storefront-Api-Keystring required

Publishable storefront public API key for the target store. Page public API keys are not accepted on Storefront public routes.

Request body

tokensstring[] required

Customer access and refresh tokens to revoke. When a tracked refresh token is supplied, the refresh token family is revoked.

Response

Success with no response body