Sign in

v2

latestOpenAPI 3.0.3Proprietary2026-07-263483431.1 MB
Customer Auth

Verify a customer login OTP

Public storefront endpoint. A successful OTP verification returns customer JWT tokens.

post/v3/stores/{store_id}/public/auth/otp/verify

Path parameters

store_idstring required

Store unique_id.

Headers

X-Scalev-Storefront-Api-Keystring required

Publishable storefront public API key for the target store. Page public API keys are not accepted on Storefront public routes.

Request body

emailstring email required
otpstring required
login_as'customer' | 'owner'

Response

Customer JWT tokens for a successful storefront customer login, OTP verification, or refresh.

accessstring required

Customer access JWT. Send it as Authorization: Bearer <token> to /v3/stores/{store_id}/customers/me/*.

refreshstring required

Refresh token for POST /v3/stores/{store_id}/public/auth/jwt/refresh.

token_type'Bearer' required

Token type to use in the Authorization header.

expires_ininteger required

Access token lifetime in seconds.

refresh_expires_ininteger required

Refresh token lifetime in seconds. Refresh tokens rotate on every refresh and are single-use.

store_unique_idstring nullable

Public store unique ID returned by some OTP verification responses.

Example response

{
  "expires_in": 900,
  "refresh_expires_in": 2592000
}