Read one of the logged-in account’s orders
Returns one of the account’s own orders by its Medusa id (order_…, from GET /api/account/orders), with its tickets when it has any (ticketsUnavailable: true instead means they could not be read right now, so retry). An order placed under any other email answers 404, the same as one that does not exist. Requires the account token from POST /api/account/session.
Authentication
Account token, browser-safe. Obtain one from POST /api/account/session with the 6-digit code POST /api/account/login emailed to the shopper; valid 30 minutes, for one store and one proven email, and it reads only that account’s own data. Sent as Authorization: Bearer <token>. Not interchangeable with the BearerAuth client token in either direction.
Path parameters
One of the account’s order ids, e.g. order_01JQ….
Headers
Identifies which store this request is for. Required on every store-scoped route. It is not authentication and not a secret — it grants no privileges and is safe to send from a browser. You receive the value once your Entria backend has been created and configured. Missing header returns 400; an unknown store returns 404.
Response
The order, with its tickets when it has any — or ticketsUnavailable: true when they could not be read.
Entria order (default fields plus email and promotions), with sensitive metadata removed and payment-provider data narrowed to public keys. Only the fields listed here are documented; the response carries more (items, subtotals, billing_address, payment_collections, summary, metadata, …).