Skip to content

Customer endpoints

The /api/customer/* namespace exposes customer-facing actions: managing EV cards, starting and stopping charging sessions, viewing history, and updating account settings. All endpoints require an authenticated customer session.

https://app.polaris.express

The customer API is served from the customer host, not the admin host. Requests to admin hosts will be rejected.

Every request must include a valid BetterAuth session cookie. Unauthenticated requests return 401.

Cookie: better-auth.session_token=<token>

Session tokens are issued by the auth flow (email/password or magic link) and are scoped to a single customer identity. The session subject determines which EV cards, sessions, and account data are visible — customers cannot read or mutate resources they do not own.