Rotate Storefront Token
Dashboard
Rotate Storefront Token
Rotate a token: mint a fresh one carrying the old name/scopes/
allowed_origins, then revoke the old. The new plaintext secret
is returned exactly once.
POST
Rotate Storefront Token
Path Parameters
Response
Successful Response
Response from POST /storefront-tokens/{key_id}/rotate. Carries
both the new token's metadata + plaintext secret AND the previous
key_id that was revoked, so the dashboard can confirm the swap.
The plaintext storefront secret (stk_sec_<...>). Returned only at creation time; not recoverable later.
The key_id of the token that was just revoked.