Update customer

Updates the customer record for the given external id. Send only the fields you want to change. Omitted top-level fields keep their current values. Use this endpoint to update profile fields, marketing consent, notification preferences, and the push device list. To read the full customer object, use get customer.

Requires a Fire spark access token obtained through token exchange.

Path parameters

Parameter	Required	Description
`id`	Yes	External customer identifier. Must match the token’s customer id.

Request body

Field	Required	Description
`name`	No	Full name.
`gender`	No	`MALE`, `FEMALE`, or `OTHER`.
`dob`	No	Date of birth (ISO 8601 with offset). Cannot be changed after it is set.
`document_type`	No	Government ID type.
`document_number`	No	Government ID number.
`country`	No	Customer country.
`phone`	No	Phone number in international format.
`delivery_addresses`	No	Up to 10 saved delivery addresses. Replaces the existing list when provided. At most one may have `preferred: true`.
`billing_profiles`	No	Up to 10 billing profiles. Replaces the existing list when provided. Each profile requires `type` (`INDIVIDUAL` or `BUSINESS`). At most one may have `preferred: true`.
`consent`	No	Marketing consent. Send only the flags you want to change; omitted flags keep their current values.
`notification_preferences`	No	Email and push delivery preferences. Send only the flags you want to change; omitted flags keep their current values.
`devices`	No	Full list of push devices (max 10). Replaces the existing list when provided. To unregister a device, omit it from the array.
`metadata`	No	Custom key-value metadata. Must serialize to 1MB or less.

Nested delivery_addresses, billing_profiles, devices, consent, and notification_preferences objects use the same shapes as get customer. Transactional messages (for example, an order nearby) only require the matching channel in notification_preferences. Marketing messages also require consent.marketing.

Field	Type	Description
`marketing`	boolean	Advertising and promotions on any channel

Notification preferences

Field	Type	Description
`email`	boolean	Receive emails
`push`	boolean	Receive push notifications
`push_token`	string	Push notification token. Omitted values keep the current token. Send `null` to clear.
`push_token_expires_at`	datetime	Required when `push_token` is set. Must be in the future and at most 180 days from now. Omitted values keep the current expiry. Send `null` to clear.

Device

Field	Required	Type	Description
`id`	Yes	string	External device identifier.
`os`	Yes	string	`IOS`, `ANDROID`, or `WEB`.
`fcm_token`	Yes	string	Firebase Cloud Messaging token.
`created_at`	Yes	datetime	When the device was registered.
`updated_at`	Yes	datetime	When the device was last updated.

Request

curl -X PATCH "https://firespark.cloud/api/storefront/v1/customers/auth0|abc123" \
  -H "Authorization: Bearer ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "phone": "+593991234567",
    "consent": {
      "marketing": true
    },
    "notification_preferences": {
      "email": true,
      "push": true,
      "push_token": "ExponentPushToken[abc]",
      "push_token_expires_at": "2026-12-15T00:00:00Z"
    },
    "devices": [
      {
        "id": "iphone-15-pro",
        "os": "IOS",
        "fcm_token": "fcm-token-abc123",
        "created_at": "2026-01-10T08:00:00Z",
        "updated_at": "2026-03-01T12:00:00Z"
      }
    ]
  }'

Response

Returns the updated customer object in data, using the same shape as get customer.

Error responses

Status	Description
`400`	Invalid request body.
`401`	Missing or invalid access token.
`403`	The `id` does not match the token’s customer id.
`404`	No customer found with the given `id`.
`422`	Cannot update date of birth or gender if already set, or invalid devices payload.

API Documentation

Endpoints

Guides

Resources

Path parameters

Request body

Notification preferences

Device

Request

Response

Error responses

​Path parameters

​Request body

​Consent

​Notification preferences

​Device

​Request

​Response

​Error responses

Path parameters

Request body

Consent

Notification preferences

Device

Request

Response

Error responses