read.customer.my_orders

The signed-in shopper’s own orders across the tenant (enriched: the store each order was placed in, display status, item count, thumbnails, payment method). Customer face only; scoped to the session identity.

• Surface: GET /v1/read/customer/my_orders
• Auth: ★ Customer read (shopper) — a CUSTOMER SESSION is REQUIRED (no credential, or an operator/platform one, is refused). The tenant comes from the SESSION, never from a parameter, and the caller’s own cus_ is resolved from the token: there is no customer_id param on this face, so a shopper can only ever read their OWN profile, addresses, orders and cart. The x-forge-store header is OPTIONAL and is only ever able to REFUSE: the kernel compares it against the session’s tenant and answers wrong_tenant (403) when it belongs to another store owner — a LIVE session in the wrong shop, which a caller must not treat as a dead one.

Params (JSON Schema)

{
  "properties": {},
  "type": "object"
}

Result (200)

Open (unknown) — this capability does not declare an output schema.

Errors

invalid_params (400) · not_found (404) · unauthorized (401) · forbidden (403) · wrong_tenant (403)