ETG API V3
Security features

Security features

URLs

The ETG asks you to provide the following URL parts of your server side:

  • The host in your account settings.

  • The URL from the return_path field in the Order Booking Finish call (B2B, Affiliate).

It is needed to make the process of card data transfer safer:

  1. You send a booking request.
  2. The ETG takes the domain with the HTTPS scheme from the return_path field.
  3. The ETG takes the host without the HTTPS scheme.
  4. The ETG runs a compatibility check to find out if the host and the domain are the same:
    1. If they match, the user will be redirected to the provided URL.
    2. If they don’t match, the booking will be ended as a failed attempt. The user may be redirected to the Emerging Travel Group site.
API support recommendations