Customer endpoints
The /api/customer/* namespace exposes customer-facing actions: managing EV cards, starting and stopping charging sessions, viewing history, and updating account settings. All endpoints require an authenticated customer session.
Base URL
Section titled “Base URL”https://app.polaris.expressThe customer API is served from the customer host, not the admin host. Requests to admin hosts will be rejected.
Authentication
Section titled “Authentication”Every request must include a valid BetterAuth session cookie. Unauthenticated requests return 401.
Cookie: better-auth.session_token=<token>Session tokens are issued by the auth flow (email/password or magic link) and are scoped to a single customer identity. The session subject determines which EV cards, sessions, and account data are visible — customers cannot read or mutate resources they do not own.