Version: v1

ondgo Booking API

Customer-facing flight booking saga -- calls ondgo.gds for GDS work, wallet.api for debit/refund. Extracted from ondgo.api's TicketOSController, which remains the live flight-purchase code.

Authentication

HTTP: Bearer Auth

Real end-user JWT (the same legacy human token every other host validates).

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	JWT

HTTP: Bearer Auth

Agency/Merchants/Hotel/Planner B2B API key, issued via ApplicationTenantController.GenerateApiKey. Same header shape as a JWT ("Authorization: Bearer <key>") but the value is the raw API key, not a JWT.

Security Scheme Type:	http
HTTP Authorization Scheme:	bearer
Bearer format:	API Key