Read confirmed booking

GET

/bookings/{booking_id}

const url = 'https://quikstik-core.fly.dev/bookings/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0';
const options = {
  method: 'GET',
  headers: {
    'x-tenant-id': '2489E9AD-2EE2-8E00-8EC9-32D5F69181C0',
    Authorization: 'Bearer <token>'
  }
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://quikstik-core.fly.dev/bookings/2489E9AD-2EE2-8E00-8EC9-32D5F69181C0 \
  --header 'Authorization: Bearer <token>' \
  --header 'x-tenant-id: 2489E9AD-2EE2-8E00-8EC9-32D5F69181C0'

Reads a confirmed booking by id, scoped to the caller’s tenant (resolved from the verified session — another tenant’s booking is 404, never visible). The booking id is the confirmed booking-intent’s id. A confirmed Booking is a distinct entity from the booking-intent hold: it is departure- and obligation-bound. Fail-closed: if no durable read backend is wired the route returns 503 (nothing is fabricated).

Authorizations

bearerAuth

Parameters

Path Parameters

booking_id

required

string format: uuid

Header Parameters

x-tenant-id

required

string format: uuid

Tenant identifier (UUID).

Authn/authz semantics are intentionally TBD for this contract slice; this header exists to keep the contract explicitly multi-tenant from day 0.

Responses

200

Booking

application/json

A confirmed booking — departure- and obligation-bound. Distinct from BookingIntent (the pre-confirmation hold). tenant_id is intentionally absent from the wire: the read is tenant-scoped from the verified session.

object

booking_id

required

The confirmed booking-intent’s id (a confirmed booking reuses the hold’s id).

string format: uuid

departure_id

required

string format: uuid

obligation_ref

required

The payment obligation this booking is bound to.

string format: uuid

status

required

Lifecycle status (snake_case wire vocabulary, shared with the booking-intent read). cancelled reflects an operator trip cancellation or a customer-initiated cancellation; the refund disposition is the ledger’s truth.

string

Allowed values: created cancelled

group_id

The group checkout this booking belongs to, if any.

string format: uuid

nullable

created_at_ms

required

Creation time (epoch milliseconds).

integer format: int64

updated_at_ms

required

Last-update time (epoch milliseconds).

integer format: int64

channel_ref

The OTA’s own booking reference, normalised (BR-1453533133 for Viator, GYG-… for GetYourGuide) — what the OTA’s mail and relay alias name. Absent for storefront bookings and for OTA bookings not yet backfilled.

string

Example

{
  "status": "created"
}

401

Missing or invalid session bearer token

application/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

403

The session’s effect authority does not cover this operation

application/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

404

No such booking for the caller’s tenant

application/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}

503

No durable backend is wired for this operation (fail-closed)

application/json

object

reason

required

Stable, machine-readable reason code (e.g. “sold_out”, “processor_not_configured”, “rail_refused”).

string

Example

{
  "reason": "sold_out"
}