Authorization

To utilize the Self Service, an organization must initiate a connection for their chosen partner. Once the 'Self Service' is offered by a partner and activated, the appropriate provider will appear in Stratech Booking.

Activation involves a few steps:

1. Click 'add'.
2. Choose the Self Service provider.
3. Save your choice.
4. Post-saving, the organization must specify the websites for which the Self Service will be activated. This can be done by selecting the newly added link, clicking 'edit', inputting the necessary domains, and saving.

Upon finalizing these steps, an event is dispatched to the partner, containing the following details:

Event details

{
  "authority": "https://identity.stratechbooking.nl/org_1234",
  "clientId": "selfserviceclient_org_1234_self_service",
  "responseType": "code",
  "scope": "<scopes>",
  "organizationReference": "org_1234"
}

The properties—authority, clientId, responseType, and scope—are essential for fetching the authorization URL from the Stratech Identity Provider. The organizationReference associates the Self Service with the appropriate organization.

Authorization endpoint

The authorize endpoint is the URL where the Stratech Identity Provider handles authorization requests. This endpoint is unique for each organization. The URL is https://identity.stratechbooking.nl/<organizationReference>/connect/authorize.

Authorization request

To refer a guest to the Identity Provider, the website needs to make a request for an authorization url. This can be obtained through an authorization request.

A request is structured as follows:

Authorization request structure

GET <authority>/connect/authorize
?client_id=<clientId>
&response_type=<responseType>
&scope=<scope>
&redirect_uri=<park website>%2Flogin-callback
&state=<random code>
&response_mode=query

Example request

Example of an authorization request

GET https://identity.stratechbooking.nl/org_abcdfgh12345/connect/authorize
?client_id=selfserviceclient_org_abcdfgh12345_mijn_stratech"
&response_type=code
&scope=openid%20offline_access%20email%20booking.partner
&redirect_uri=https://twentschehoogte.stratechbooking%2Flogin-callback
&state=123456789abcdefgh
&response_mode=query

Authorization request response

The response that comes back should be used to redirect guests to the Stratech Identity Provider.

Example response

Example of an authorization request response

https://identity.stratechbooking.nl/org_abcdfgh12345/Account/Login?ReturnUrl=%2Forg_gh275q7%2Fconnect%2Fauthorize%2Fcallback%3Fclient_id%3Dselfserviceclient_org_gh275q7_test%26response_type%3Dcode%26scope%3Dopenid%2520offline_access%2520email%2520booking.partner%26redirect_uri%3Dhttps%253A%252F%252Fhost.docker.internal%252Flogin-callback%26state%3Dfc73891e4b54439a865f8ff14121adaa%26response_mode%3Dquery