Sign in

v2

OpenAPI 3.0.3Proprietary2026-07-263483431.1 MB
Customer Auth

Refresh a customer JWT

Public storefront endpoint. Refreshes a customer JWT issued by storefront customer auth. Refresh tokens are single-use and rotate on every successful refresh; store the returned refresh value and discard the previous one. Reusing an already-rotated refresh token revokes the refresh-token family.

post/v3/stores/{store_id}/public/auth/jwt/refresh

Path parameters

store_idstring required

Store unique_id.

Headers

X-Scalev-Storefront-Api-Keystring required

Publishable storefront public API key for the target store. Page public API keys are not accepted on Storefront public routes.

Request body

refreshstring required

Current customer refresh token. Refresh tokens are single-use; store the new refresh returned by this endpoint and discard the previous one.

Response

Customer JWT tokens for a successful storefront customer login, OTP verification, or refresh.

accessstring required

Customer access JWT. Send it as Authorization: Bearer <token> to /v3/stores/{store_id}/customers/me/*.

refreshstring required

Refresh token for POST /v3/stores/{store_id}/public/auth/jwt/refresh.

token_type'Bearer' required

Token type to use in the Authorization header.

expires_ininteger required

Access token lifetime in seconds.

refresh_expires_ininteger required

Refresh token lifetime in seconds. Refresh tokens rotate on every refresh and are single-use.

store_unique_idstring nullable

Public store unique ID returned by some OTP verification responses.

Example response

{
  "expires_in": 900,
  "refresh_expires_in": 2592000
}