01.software Docs

loginCustomer

Use the SDK for application integration. This read-only reference covers Commerce, Customer Auth, Membership and Events.

All HTTP operations
POST
/api/customers/login

Direct tenant-bound password login, not hosted ceremony. Invalid credentials are non-enumerating, account lock is 423, suspension 403, unavailable refresh storage 503. Password/JWT/session-generation authority stays server-side.

Authorization

publishableKey
headerX-Publishable-Key<token>

Tenant publishable key for authentication (sent via X-Publishable-Key header)

Request Body

application/json
  1. body
email*string
Match^(?:[A-Za-z0-9_'+\-]+\.)*[A-Za-z0-9_'+\-]*[A-Za-z0-9_+-]@(?:[A-Za-z0-9][A-Za-z0-9\-]*\.)+[A-Za-z]{2,}$
Formatemail
Lengthlength <= 254
password*string
Length1 <= length <= 128

Response Body

Existing direct customer-auth wire

application/json
  1. response
token*string
refreshToken*string
customer*

Examples may be generated from schemas; they are illustrative, not recorded successful API calls. Example snippets may omit required authentication headers.

Example Request
curl -X POST 'https://api.01.software/api/customers/login' \  -H 'Content-Type: application/json' \  -d '{  "email": "user@example.com",  "password": "string"}'
Example Response
{  "token": "string",  "refreshToken": "string",  "customer": {    "id": "string",    "name": "string",    "email": "string",    "phone": "string",    "authProvider": "string",    "isGuest": true,    "marketingConsent": {},    "memberships": [      {        "title": "string",        "description": "string",        "benefits": [          {            "title": "string",            "description": "string"          }        ],        "color": "string",        "image": null,        "badgeColor": "string",        "badgeImage": null,        "displayOrder": 0      }    ]  }}