Overview

Authenticate a customer through a social identity provider — Facebook, Google, or Auth0. The provider token is verified server-side; an existing linked customer is returned, or a new customer is created and linked on first sign-in. On success you receive the customer and a JWT.

Example: A visitor taps “Continue with Google.” Send idp_name, the provider’s idp_token, and the customer’s email; on success you receive their profile and a token to use for their session.

📘

First sign-in creates the customer

If no customer is linked to the provider identity and none matches the email, a new customer is created with email_confirm set to true and linked to the provider.

Conditional Requirements