Sign the shopper out
- Credentials, one of
- Store key and Shopper session
- Store key
- Scopes
members:write
Revokes the shopper's refresh tokens. Best-effort; a missing or already-invalid session is not an error. Clear your cookie either way.
Old path, deprecated, sunset 1 Feb 2027: DELETE /v1/shopper/session.
AuthorizationBearer <sez_pub_... (publishable) or sez_sk_... (secret)>A per-store key from the console. Publishable keys are browser-safe; secret keys are server-only.
Scope: members:write
X-Shopper-Session<token>A 14-day shopper session from POST /v1/store/shopper/session. Preferred on a server.
Signed out.
application/json- response
data*curl -X DELETE 'https://api.shopeazy.co/v1/store/shopper/session' \ -H 'Authorization: Bearer sez_pub_...'{ "data": { "ok": true }}Exchange a Firebase ID token for a 14-day shopper session POST
Verified against the store's own sign-in tenant (`store.auth.tenantId`); a token from another pool is refused. The shopper's profile is mirrored into the store. Keep `sessionToken` in your own httpOnly cookie and send it as `X-Shopper-Session`. Old path, deprecated, sunset 1 Feb 2027: `POST /v1/shopper/session`.
The signed-in shopper and their membership of this store GET
Always the caller's own record. KYC details and documents are never returned. `canCheckout` is true on an open store, or for an active member of a members-only one. Old path, deprecated, sunset 1 Feb 2027: `GET /v1/me`.