References¶

Providing a token¶

You must implement the following endpoint so Booking.com can retrieve an OAuth 2.0 token to authenticate webhook calls to your server.

POST /oauth/token

Header	Value	Description
Authorization	Basic `<credentials>`	Base64-encoded `clientId:clientSecret` (the credentials you provided during registration)
Content-Type	application/x-www-form-urlencoded	Required

Parameter	Type	Description	Required
grant_type	String	Always `client_credentials`	Yes

POST /oauth/token?grant_type=client_credentials

Field	Type	Description	Required
access_token	String	The token Booking.com will use in the `Authorization` header when calling your webhook endpoints.	Yes
token_type	String	Must always be `Bearer`.	Yes
expires_in	Integer	Token validity duration in seconds (e.g. `3600` for 1 hour). Booking.com will re-request when expired.	Recommended

{
  "access_token": "eyJhbGciOiJSUzI1NiIsInR5cCI6...",
  "token_type": "Bearer",
  "expires_in": 3600
}