Order confirmation/detail by order_number (tenant-scoped → cross-tenant 404).

GET

/v1/commerce/orders/{order_number}/

const url = 'https://api.nudova.dev/api/v1/commerce/orders/example/';
const options = {method: 'GET', headers: {Authorization: '<Authorization>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://api.nudova.dev/api/v1/commerce/orders/example/ \
  --header 'Authorization: <Authorization>'

Guest-accessible (the confirmation/thank-you page is reached without an account), but a guest may only read the order they placed: the request’s guest token must match the order’s. Authenticated customers read their own. A mismatch returns 404 (never 403) so order existence can’t be probed by guessing sequential order numbers.

Authorizations

Bearer

Parameters

Path Parameters

order_number

required

string

Responses

200

application/json