---
search:
  tags:
    - Customers
    - POST
seo:
  description: >-
    Validates email + password credentials for a shop's customer account.
    Returns the… Reference for the POST /customers/sessions endpoint in the
    Bolder API v2.
sidebar:
  label: Authenticate a customer
  badge: POST
title: Authenticate a customer
type: openapi-operation
---
Validates email + password credentials for a shop's customer account.
Returns the contact entity with a session token on success.
Requires a Bearer token with `customers.write` scope (the same token used for
all v2 requests) and `shop_id` in the request body.

`POST /customers/sessions`

**Request body** (`application/json`, required)

- `shop_id` (integer, required) — ID of the shop the customer belongs to.
- `email` (string, required)
- `password` (string, required)

Request body example:

```json
{
  "shop_id": 1,
  "email": "jane@example.com",
  "password": "s3cr3tpassword"
}
```

**Responses**

- `200` — Authentication successful
- `422` — Invalid credentials

Response example, 200:

```json
{
  "id": 3001,
  "email": "jane@example.com",
  "name": "Jane Smith",
  "customer_status": "private",
  "token": "eyJhbGciOiJIUzI1NiJ9...",
  "_links": {
    "self": {
      "href": "https://api.onbolder.com/v2/customers/3001"
    }
  }
}
```