Skip to navigation

Redeem a checkout ticket (our checkout only)

Redeems the single-use ct ticket a member-authenticated cart mutation put into cart.checkoutUrl, for a checkout token bound to that cart. For our hosted checkout only: its BFF calls it over a service binding. A storefront never needs it, and any call over this public URL is refused with 403 (code: CHECKOUT_SESSION_INTERNAL_ONLY). The ticket itself stays redeemable by opening cart.checkoutUrl — that is the handoff — so treat the checkout URL as the member’s until it has been opened. The token names the cart and its member_key, never the member.

Headers

x-entriastringRequired

Identifies which store this request is for. Required on every store-scoped route. It is not authentication and not a secret — it grants no privileges and is safe to send from a browser. You receive the value once your Entria backend has been created and configured. Missing header returns 400; an unknown store returns 404.

Request

This endpoint expects an object.
ticketstringRequiredformat: "^[A-Za-z0-9_-]{43}$"

The ct value from cart.checkoutUrl.

Response

The checkout token.
access_tokenstring
token_typeenum
Allowed values:
expires_indouble

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
429
Too Many Requests Error
503
Service Unavailable Error