Modify Booking
Modify an existing event ticket protection booking. Typical modifications include event reschedules (updating event start/end dates) or adjusting ticket counts.
Composite Authentication Scheme (Client Key, Date, and Signature)
Requires three mandatory headers in every request:
1. X-Api-Key (Client Key)
- Purpose: Public identifier for the API consumer.
2. Date (Timestamp)
- Purpose: Timestamp used for generating the signature and preventing replay attacks.
- Format: RFC 7231 format (e.g., in GMT).
3. Authorization (Computed Signature)
- Purpose: Cryptographic signature that verifies the request's authenticity and integrity.
- Format:
SIGNATURE [authHeader]
The authHeader value is derived from a cryptographic hash (e.g., HMAC-SHA256) of canonical request components (HTTP Method, Path, and the contents of the Date header), signed with the private Client Secret.
OK
Forbidden
Unprocessable Entity
PATCH /x/partners/{partner_code}/bookings/{booking_id}/ HTTP/1.1
Host: api.xcover.com
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 181
{
"quotes": [
{
"id": "78e02aeb-86fa-47e1-b1b7-e0f12b734c5a",
"update_fields": {
"events": [
{
"id": "666643",
"start_date": "2026-05-06T15:00:00.000Z",
"end_date": "2026-05-07T15:00:00.000Z"
}
]
}
}
]
}{
"id": "ETP9K-4MR2N-INS",
"status": "CONFIRMED",
"currency": "USD",
"total_price": 123.68,
"total_price_formatted": "US$123.68",
"quotes": [
{
"id": "78e02aeb-86fa-47e1-b1b7-e0f12b734c5a",
"status": "CONFIRMED",
"price": 123.68,
"price_formatted": "US$123.68",
"price_diff": 0,
"price_diff_formatted": "US$0.00"
}
],
"total_price_diff": 0,
"total_price_diff_formatted": "US$0.00"
}Preview the price changes that would result from a modification without applying them. The response includes an update_id that can be used to confirm the modification.
Composite Authentication Scheme (Client Key, Date, and Signature)
Requires three mandatory headers in every request:
1. X-Api-Key (Client Key)
- Purpose: Public identifier for the API consumer.
2. Date (Timestamp)
- Purpose: Timestamp used for generating the signature and preventing replay attacks.
- Format: RFC 7231 format (e.g., in GMT).
3. Authorization (Computed Signature)
- Purpose: Cryptographic signature that verifies the request's authenticity and integrity.
- Format:
SIGNATURE [authHeader]
The authHeader value is derived from a cryptographic hash (e.g., HMAC-SHA256) of canonical request components (HTTP Method, Path, and the contents of the Date header), signed with the private Client Secret.
OK
Forbidden
Unprocessable Entity
PATCH /x/partners/{partner_code}/bookings/{booking_id}/quote_for_update HTTP/1.1
Host: api.xcover.com
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 181
{
"quotes": [
{
"id": "78e02aeb-86fa-47e1-b1b7-e0f12b734c5a",
"update_fields": {
"events": [
{
"id": "666643",
"start_date": "2026-05-06T15:00:00.000Z",
"end_date": "2026-05-07T15:00:00.000Z"
}
]
}
}
]
}{
"id": "ETP9K-4MR2N-INS",
"status": "CONFIRMED",
"currency": "USD",
"total_price": 123.68,
"total_price_formatted": "US$123.68",
"quotes": [
{
"id": "78e02aeb-86fa-47e1-b1b7-e0f12b734c5a",
"status": "CONFIRMED",
"price": 123.68,
"price_formatted": "US$123.68",
"price_diff": 0,
"price_diff_formatted": "US$0.00"
}
],
"total_price_diff": 0,
"total_price_diff_formatted": "US$0.00",
"update_id": "HrKp7-WmQcR-h2YO8"
}Finalize a previewed modification.
Composite Authentication Scheme (Client Key, Date, and Signature)
Requires three mandatory headers in every request:
1. X-Api-Key (Client Key)
- Purpose: Public identifier for the API consumer.
2. Date (Timestamp)
- Purpose: Timestamp used for generating the signature and preventing replay attacks.
- Format: RFC 7231 format (e.g., in GMT).
3. Authorization (Computed Signature)
- Purpose: Cryptographic signature that verifies the request's authenticity and integrity.
- Format:
SIGNATURE [authHeader]
The authHeader value is derived from a cryptographic hash (e.g., HMAC-SHA256) of canonical request components (HTTP Method, Path, and the contents of the Date header), signed with the private Client Secret.
Created
Forbidden
Not Found
Unprocessable Entity
POST /x/partners/{partner_code}/bookings/{booking_id}/confirm_update/{update_id}/ HTTP/1.1
Host: api.xcover.com
Authorization: YOUR_API_KEY
Content-Type: application/json
Accept: */*
Content-Length: 25
{
"xpay_charge_id": "text"
}{
"id": "ETP9K-4MR2N-INS",
"status": "CONFIRMED",
"currency": "USD",
"total_price": 123.68,
"total_price_formatted": "US$123.68",
"quotes": [
{
"id": "78e02aeb-86fa-47e1-b1b7-e0f12b734c5a",
"status": "CONFIRMED",
"price": 123.68,
"price_formatted": "US$123.68",
"price_diff": 0,
"price_diff_formatted": "US$0.00"
}
],
"total_price_diff": 0,
"total_price_diff_formatted": "US$0.00"
}Last updated
Was this helpful?