Authentication API

check auth cookie

GET /api/rest/customer/v1/auth

auth cookie is valid and responds with new cookie

Request

Headers

Accept: application/json
Content-Type: application/json
Cookie: _yeti_customer_v1_session=eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsiY3VzdG9tZXItdjEiXSwic3ViIjoxMSwiZXhwIjoxNzg0MzgwODUzfQ.DBwXtBSrnkODrKIZwLxJwQj1vrxaGaZuwX0kCrxsrNU; path=/; expires=Sat, 18 Jul 2026 13:20:53 GMT; httponly; samesite=lax
Host: example.org

Route

GET /api/rest/customer/v1/auth

Response

Headers

x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
content-type: application/json; charset=utf-8
vary: Accept
etag: W/"da8baa7a78a121b4355b7e0d2cb53958"
cache-control: max-age=0, private, must-revalidate
set-cookie: _yeti_customer_v1_session=eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOlsiY3VzdG9tZXItdjEiXSwic3ViIjoxMSwiZXhwIjoxNzg0MzgxMzkzfQ.uVnQ2omXtdOk8mEHQkjnAS3HbXP03tXUWyrKsO2KoMY; path=/; expires=Sat, 18 Jul 2026 13:29:53 GMT; httponly; samesite=lax
x-request-id: 7246b08d-d7bf-4e86-8105-84b536a60338
x-runtime: 0.006388
content-length: 19

Status

200 OK

Body

{
  "allow-rec": false
}