Widget signing secrets

POST /widget-signing-secrets/sign

Sign a customer's email address, so your server can identify a shopper to the widget API without holding the signing secret in your own code. Send the address the shopper signed in with and pass the three values back on the widget request. The signature is good for 24 hours.

Requires the customers:write permission.

Body parameters

emailstring (email)required

The email address of the customer your storefront has signed in.

Request
curl \
  -X POST \
  "https://your-store.meisei.app/api/widget-signing-secrets/sign" \
  -H "Authorization: Bearer sk_YOUR_SECRET_KEY" \
  -H "Content-Type: application/json" \
  -d '{
  "email": "user@example.com"
}'
Response
{
  "email": "user@example.com",
  "timestamp": "string",
  "signature": "string"
}