Read the logged-in member’s members and memberships
Returns the members behind the member token’s email and their memberships, read from the membership system and cached for up to 5 minutes, so a renewal or a block can take that long to show. Blocked members and memberships are left out; expired memberships stay in, so a lapsed member can renew. A household sharing one email sees every member behind it. Each membership lists its unblocked cards, expired ones included (number, expiry, temporary flag); PIN codes and contact details are never returned. Requires the member token from POST /api/member/session; a backend with a POST /oauth/token client token uses GET /api/members instead.
Authentication
OTP member token, browser-safe. Obtain one from POST /api/member/session with the 6-digit code POST /api/member/login emailed to the shopper; valid 30 minutes, for one store and one proven email, and it reads only that member’s own data. Sent as Authorization: Bearer <token>. Not interchangeable with the BearerAuth client token in either direction.
Headers
Identifies which store this request is for. Required on every store-scoped route. It is not authentication and not a secret — it grants no privileges and is safe to send from a browser. You receive the value once your Entria backend has been created and configured. Missing header returns 400; an unknown store returns 404.
Response
The member’s own members and memberships.
The (normalised) email the members were looked up by.