Activate a customer account

Completes the customer account activation flow by setting the initial password. The token is sent to the customer’s email after the merchant triggers customers:start_activation.

PUT/customers/activations/{token}

Authorization

AuthorizationBearer token (JWT) · headerrequired

Path parameters

tokenstringrequired

Activation token from the email link.

Request body

requiredapplication/json

passwordstringrequired

The new password for the account (min 8 chars).

Responses

200

Account activated

422

Invalid or expired token

Try it

Server

Base URLCustom base URLOverrides the selected server when set.

Authorization

Bearer token (JWT)Remember on this deviceInclude my values in samples

Parameters

tokenpath*Activation token from the email link.

Bodyapplication/json

passwordstring*The new password for the account (min 8 chars).

Request

curl -X PUT 'https://api.onbolder.com/v2/customers/activations/abc123def456ghi789' \
  -H 'Authorization: Bearer YOUR_TOKEN' \
  -H 'Accept: application/json' \
  -H 'Content-Type: application/json' \
  -d '{
  "password": "newSecureP@ss1"
}'

const response = await fetch("https://api.onbolder.com/v2/customers/activations/abc123def456ghi789", {
  method: "PUT",
  headers: {
    "Authorization": "Bearer YOUR_TOKEN",
    "Accept": "application/json",
    "Content-Type": "application/json"
  },
  body: "{\n  \"password\": \"newSecureP@ss1\"\n}"
});

import requests

response = requests.put(
    "https://api.onbolder.com/v2/customers/activations/abc123def456ghi789",
    headers={
        "Authorization": "Bearer YOUR_TOKEN",
        "Accept": "application/json",
        "Content-Type": "application/json"
    },
    data="{\n  \"password\": \"newSecureP@ss1\"\n}",
)

Response

{
  "id": 3001,
  "email": "jane@example.com",
  "status": "private",
  "_links": {
    "self": {
      "href": "https://api.onbolder.com/v2/customers/3001"
    }
  }
}