Skip to navigation
OTP Members

Check a checkout token against a member-bound cart (our checkout only)

Answers whether a checkout token from POST /api/member/checkout-session opens a member-bound cart: the token must have been issued for this store, this cart and the cart’s member_key. For our hosted checkout only: its BFF calls it over a service binding, and any call over this public URL is refused with 403 (code: CART_ACCESS_INTERNAL_ONLY).

Headers

x-entriastringRequired

Identifies which store this request is for. Required on every store-scoped route. It is not authentication and not a secret — it grants no privileges and is safe to send from a browser. You receive the value once your Entria backend has been created and configured. Missing header returns 400; an unknown store returns 404.

Request

This endpoint expects an object.
tokenstringRequired
The checkout token.
cartIdstringRequired
The cart being opened.
memberKeystringRequired

The cart’s metadata.member_key.

Response

The token opens the cart.
okboolean

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error