Sign in with the code
Trades the emailed code for the buyer’s token, which every other route of the Customer API takes as Authorization: Bearer shoply_ct_.... It reaches this buyer’s own orders at this store and nothing else, and works for 30 days.
Keep it where only your page or app can read it, never in an address. A buyer holds 20 tokens at a store at most: a 21st ends their oldest.
A wrong code is code_wrong, and a code past its 10 minutes or its five tries is code_expired. After 20 wrong codes in a day for one address, none is checked for it until the day is over (code_paused).
It is counted for the address that asks: 30 in fifteen minutes.
Path Parameters
The store's ID, from Settings, General in its dashboard. It is not a secret: a page may show it.

