# Customer authentication

Use these operations to validate the identity of users and manage authentication credentials.

- [GET /authentication-options](/docs/dev-docs/api/customer-authentication/getauthenticationoption.md): Retrieves customer authentication options.
- [PUT /authentication-options](/docs/dev-docs/api/customer-authentication/putauthenticationoption.md): Changes customer authentication options.
- [GET /authentication-tokens](/docs/dev-docs/api/customer-authentication/getauthenticationtokencollection.md): Retrieves a list of customer authentication tokens.
- [POST /authentication-tokens](/docs/dev-docs/api/customer-authentication/postauthenticationtoken.md): Logs in a customer.
- [GET /authentication-tokens/{token}](/docs/dev-docs/api/customer-authentication/getauthenticationtokenverification.md): Verifies a customer's authentication token.
- [DELETE /authentication-tokens/{token}](/docs/dev-docs/api/customer-authentication/deleteauthenticationtoken.md): Logs out a customer.
- [POST /authentication-tokens/{token}/exchange](/docs/dev-docs/api/customer-authentication/postauthenticationtokenexchange.md): Exchanges an authentication token for a JWT. By default, this operation invalidates the exchanged authentication token.
- [GET /credentials](/docs/dev-docs/api/customer-authentication/getcredentialcollection.md): Retrieves a list of authentication credentials.
- [POST /credentials](/docs/dev-docs/api/customer-authentication/postcredential.md): Creates an authentication credential.
- [GET /credentials/{id}](/docs/dev-docs/api/customer-authentication/getcredential.md): Retrieves a credential with a specified ID.
- [PUT /credentials/{id}](/docs/dev-docs/api/customer-authentication/putcredential.md): Creates or updates (upserts) an authentication credential with a specified ID.
- [GET /password-tokens](/docs/dev-docs/api/customer-authentication/getpasswordtokencollection.md): Retrieves a list of reset password tokens.
- [POST /password-tokens](/docs/dev-docs/api/customer-authentication/postpasswordtoken.md): Creates a reset password token.
- [GET /password-tokens/{id}](/docs/dev-docs/api/customer-authentication/getpasswordtoken.md): Retrieves a reset password token with a specified ID.