Request a magic-link login email for a customer (person) account

POST

/customer-login/requests

curl --request POST \
  --url https://quikstik-core.fly.dev/customer-login/requests \
  --header 'Content-Type: application/json' \
  --header 'x-tenant-id: 2489E9AD-2EE2-8E00-8EC9-32D5F69181C0' \
  --data '{ "email": "example" }'

• Production

The customer variant of requestLoginLink (issuer local-person, docs/customer-accounts/design.md D1/D3). Always 202; if a Person with this email exists in the tenant, a single-use short-TTL challenge is issued and emailed, else nothing. Customer sessions carry zero operator authority by construction (D2).

Parameters

Header Parameters

x-tenant-id

required

string format: uuid

Tenant identifier (UUID).

Authn/authz semantics are intentionally TBD for this contract slice; this header exists to keep the contract explicitly multi-tenant from day 0.

Request Body^required

Media typeapplication/json

object

email

required

string

>= 3 characters

Example ^generated

{
  "email": "example"
}

Responses

202

Accepted (identical for known and unknown emails)

400

Malformed body

Media typeapplication/json

object

reason

required

string

Example ^generated

{
  "reason": "example"
}

503

No durable backend is wired for this operation (fail-closed)

Media typeapplication/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}