Authorization

ETG API V3

Fundamentals

Authorization

The host: https://api.worldota.net.

The API key is the sequence of characters used to send API requests.

The ETG:

Requires HTTP Basic Authentication via the API key.
Grants the following API key types:
- test—the test environment.
- production—the production environment.

Test environment

Use sandbox API keys only to book the test hotel with hid - 8473727 or id - test_hotel_do_not_book.

⚠️

The test hotel implies real bookings with all financial responsibilities.

Use the production API keys to book hotels available via the ETG API.

You may have several production API keys across different contracts.

You can find the created API keys in the API section of your contract settings. Access to this section is provided for the Master account only.

The API key structure consists of the two values: <KEY_ID>:<API_KEY>.

API key ID. Use it as an HTTP Basic Authentication username.

API key access token. Use it as an HTTP Basic Authentication password.

Keep this value confidential. Otherwise, a third party may gain access to and misuse your data.

Each endpoint has a limit on the number of requests. To discuss changes to these limits, contact your account manager.

The limit is specified in the corresponding header of the call response. The ETG API provides:

The number of seconds during which requests can be executed within the X-RateLimit-RequestsNumber.

The maximum number of requests that can be executed within the X-RateLimit-SecondsNumber.

The number of remaining requests in the current period:

The string with the date and time when the X-RateLimit-SecondsNumber expires. The format is YYYY-MM-DDTHH:MM:SS in the UTC+0 time zone.

"X-RateLimit-SecondsNumber": 1
"X-RateLimit-RequestsNumber": 10
"X-RateLimit-Remaining": 9
"X-RateLimit-Reset": "2018-08-14T08:54:11"