Message Security

API Key

The partner must provide a globally unique API key to us as a trusted partner, and this key will be usable throughout the entire duration of the partnership.

Authentication

Pelican Hotel Solutions will use API Key to access partner-restricted endpoints. We will include an Authorization header in each request, like so:

Authorization: Basic {Authorization String}

{Authorization String} will be replaced with the API key provided by the Partner

Authentication failure

If a call fails authentication, the API must returns HTTP status code 401:

{
  "Status": "Fail",
  "Errors": {
    "Code": "497",
    "ShortText": "Authorization Required"
  }
}