Create a new customer account.
Updated
DashForDevs uses a passwordless-first approach. Customers register by verifying their email with a one-time code (OTP). No separate signup form is needed — requesting an OTP for a new email automatically creates the customer account.
Request an OTP code to be sent to the customer's email:
import dash from "@/lib/dash"
// Step 1: Request OTP — this creates the customer if they don't exist
const result = await dash.auth.requestOTP("newcustomer@example.com", {
accepts_marketing: true, // optional: opt into marketing emails
captcha_token: "...", // optional: Turnstile/reCAPTCHA token
})
// result = { message: "OTP sent", email: "newcustomer@example.com" }
After the customer enters the code from their email:
// Step 2: Verify OTP
const { customer, access_token, refresh_token } = await dash.auth.verifyOTP({
email: "newcustomer@example.com",
code: "482901",
})
// Customer is now authenticated
console.log(customer)
// {
// id: "cust_abc123",
// email: "newcustomer@example.com",
// first_name: "",
// last_name: "",
// loyalty_points: 0,
// ...
// }
The SDK automatically stores the tokens internally. All subsequent requests that require authentication will include them.
After OTP registration, customers can set a password for future logins:
// Must be authenticated first
await dash.auth.setPassword("securePassword123!")
// Now the customer can use either OTP or password to log in
See Login / Logout for password-based authentication.
| Step | Method | Endpoint |
|---|---|---|
| Request OTP | POST | /storefront/auth/request-otp |
| Verify OTP | POST | /storefront/auth/verify-otp |
| Set Password | POST | /storefront/auth/set-password |
{
"email": "newcustomer@example.com",
"accepts_marketing": true,
"captcha_token": "optional_turnstile_token"
}
{
"email": "newcustomer@example.com",
"code": "482901"
}
{
"access_token": "eyJ...",
"refresh_token": "eyJ...",
"token_type": "Bearer",
"expires_in": 86400,
"customer": {
"id": "cust_abc123",
"email": "newcustomer@example.com",
"first_name": "",
"last_name": "",
"has_password": false,
"loyalty_points": 0
}
}
If the customer had a guest cart before registering, merge it into their account immediately after authentication:
// After verifyOTP succeeds
await dash.cart.migrateToUser()
// Guest cart items are now in the customer's persistent cart
See Get Cart for more on cart migration.