Club Med Portal API

🚀 Highlights

New sub-reason values: Added ONE_EURO_HOTEL_NIGHT sub-reason for customer support requests
Advanced API key configuration: New prebookable_price_access parameter to control access to ODR prices
Security fix: The /v1/search_price route no longer returns prices during the pre-booking period when not authorized

📋 Summary

This release brings significant improvements to customer request management and API key configuration. A new ONE_EURO_HOTEL_NIGHT sub-reason is now available for CXO customer support forms. API key management is enhanced with a new prebookable_price_access parameter for fine-grained control over access to prices during the ODR (Offre De Réservation) period. Finally, a security fix has been applied to price search to prevent unauthorized access to pre-booking prices via specific requests with identical dates.

🆕 New features

New sub-reason for customer support requests

The customer support request update resource now accepts the ONE_EURO_HOTEL_NIGHT value in the sub_reason_code field of the reasons.

Affected endpoint:

PUT/v0/customers/{customer_id}/support_requests/{support_request_id}

Payload example:

{
  "request_type": "CLAIM",
  "subject_code": "UPCOMING_STAY",
  "reasons": [
    {
      "code": "COMMERCIAL",
      "sub_reason_code": "ONE_EURO_HOTEL_NIGHT"
    }
  ]
}

New configuration parameter for access to ODR prices

API keys can now be configured with the boolean parameter prebookable_price_access to allow or disallow access to prices during the pre-booking period on all endpoints returning prices (excluding calendar and bookable dates).

Affected endpoints:

New field:

prebookable_price_access (boolean): If set to true, the API key will have access to prices during the pre-booking period on all API endpoints. Default value: false.

Configuration example:

{
  "prebookable_price_access": true
}

🐛 Bug fixes

Security fix on price search

The GET/v1/search_price route has been corrected to prevent access to pre-booking (PRE_BOOKABLE) prices when the first_date and last_date parameters are identical and correspond to an ODR date. The system now performs an intersection between the price index and the date index in all cases.