On this site

Brand Kit API

Storefront checkout, customer accounts, and brand admin routes on your provisioned Spoke server.

Brand Kit API

Runs on your brand server after nerionx provision. Storefront routes are public or Bearer-authenticated; admin routes require a Brand Kit session with RBAC roles. Checkout is the critical path — it validates the cart locally then forwards to Hub POST /orders with your brand API key server-side.

Customer accounts

Method	Path	Auth	Description
POST	/storefront/account/register	None	Create customer account
POST	/storefront/account/login	None	Email/password → Bearer token
GET	/storefront/account/me	Bearer	Current customer profile
GET	/storefront/account/orders	Bearer	Order history
GET	/storefront/account/export	Bearer	GDPR data export
DELETE	/storefront/account	Bearer	GDPR erasure request

Commerce & admin

Method	Path	Auth	Description
GET	/storefront/products	None	Local catalog mirror
POST	/storefront/checkout	Bearer	Checkout → Hub POST /orders
GET	/admin/brand-kit/orders	Session + RBAC	Brand admin order list
GET	/admin/brand-kit/team/me	Session + RBAC	Current admin role

Code examples

Customer login

Storefront account login returns a Bearer token for authenticated routes.

curl -s -X POST "http://localhost:9001/storefront/account/login" \
  -H "Content-Type: application/json" \
  -d '{"email":"buyer@example.com","password":"secret"}'

Storefront checkout

Brand Kit checkout forwards to Hub POST /orders after local cart validation.

curl -s -X POST "http://localhost:9001/storefront/checkout" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <customer_token>" \
  -d '{
  "items": [{ "sku_id": "SKU-001", "quantity": 1 }],
  "shipping_address": {
    "line1": "1 Main St", "city": "Zurich",
    "postal_code": "8001", "country": "CH"
  }
}'

Environment variables

HUB_API_URL — Hub base (https://nerion.syntrik.io)
HUB_API_KEY — Brand live or sandbox key
NEXT_PUBLIC_SPOKE_BACKEND_URL — Storefront proxy target

Customer accounts

Method	Path	Auth	Description
POST	/storefront/account/register	None	Create customer account
POST	/storefront/account/login	None	Email/password → Bearer token
GET	/storefront/account/me	Bearer	Current customer profile
GET	/storefront/account/orders	Bearer	Order history
GET	/storefront/account/export	Bearer	GDPR data export
DELETE	/storefront/account	Bearer	GDPR erasure request

Method

Path

GET

/storefront/products

POST

/storefront/checkout

GET

/admin/brand-kit/orders

GET

/admin/brand-kit/team/me

Code examples

Customer login

Storefront account login returns a Bearer token for authenticated routes.

curl -s -X POST "http://localhost:9001/storefront/account/login" \
  -H "Content-Type: application/json" \
  -d '{"email":"buyer@example.com","password":"secret"}'

Storefront checkout

Brand Kit checkout forwards to Hub POST /orders after local cart validation.

curl -s -X POST "http://localhost:9001/storefront/checkout" \
  -H "Content-Type: application/json" \
  -H "Authorization: Bearer <customer_token>" \
  -d '{
  "items": [{ "sku_id": "SKU-001", "quantity": 1 }],
  "shipping_address": {
    "line1": "1 Main St", "city": "Zurich",
    "postal_code": "8001", "country": "CH"
  }
}'