Confirm

Lock the offer the guest picked. Confirm returns the first authoritative price and cancellation policy, the guest fields Prebook needs, and a new combinationKey.

POST/booking/accommodations/{accommodationId}/confirm

The first price you can rely on

Quote prices and policies are informational. Confirm returns the authoritative price, cancellation policies and remarks, plus a new combinationKey for Prebook. If warnings[] is not empty, show the change and get the guest's consent again. See Handling warnings.

Request

Headers

auth-tokenstringrequired

The same token you used for Quote.

Accept-EncodingstringrequiredDocs

gzip

Content-Typestringrequired

application/json

Path

accommodationIdstringrequired

Hotel code from the Quote response, for example MASTER-1782232.

Body

accommodationobjectrequired

The offer to confirm.

Child attributes

combinationKeystringrequiredDocs

The key from the Quote or Quote single response. Opaque, any length.

Response

200 OK

auditDataAuditResponseVO

Includes traceId (one per token: log it) and authToken (redact it before logging).

warnings[]WarningVO[]Spec

type (PRICE_CHANGE or CANCELLATION_POLICIES_CHANGE) and description. Handle them.

requiredFieldobject

The guest data Prebook needs, per role. Each is a RequiredPassengerData[] such as ["FIRST_NAME", "EMAIL"].

Child attributes

contactPerson[]string[]

For the first person of the first room.

otherPersons[]string[]

For every guest who is not the contact person or a room holder.

roomHolders[]string[]

For the first person of each other room.

accommodationobject

The hotel's full identity and the confirmed offer.

Child attributes

codestring

Hotel code.

giataIdinteger

GIATA id. Can be null.

namestring

Hotel name.

categoryobjectSpec

code (such as S4) and name (such as 4 STARS). An object here, a plain string in datasheets.

geolocationobject

latitude and longitude.

checkIndate

yyyy-MM-dd.

checkOutdate

yyyy-MM-dd.

combinationobject

The confirmed offer. Fields below.

accommodation.combinationobject

The authoritative offer, with the key for Prebook.

Child attributes

combinationKeystringDocs

New key. Send it to Prebook. The Quote key no longer works.

rooms[]object[]

Room descriptions.

mealPlanMealPlanVO

id, type, description and providerDescription. Show description.

onRequestboolean

true: no confirmed quota. The supplier has to accept.

priceMoneyVO

The authoritative price, in the microsite currency.

providerstringDocs

The supplier.

cancellationPolicies[]CancellationPolicyVO[]

Authoritative penalty steps: from date on, cancelling costs amount.

remarks[]string[]

Authoritative supplier remarks.

recommendedSellingPriceMoneyVO

Only when supplied. Don't depend on it.

priceBreakdownobject

agencyFee, and rsp with applied and price.

offerobject

strikethroughPrice, only when the supplier sends an offer.

Request

curl -s --compressed -X POST \
  "$NAVA_BASE_URL/booking/accommodations/MASTER-1782232/confirm" \
  -H "auth-token: $TOKEN" \
  -H "Accept-Encoding: gzip" \
  -H "Content-Type: application/json" \
  -d '{ "accommodation": { "combinationKey": "'"$QUOTE_KEY"'" } }'

Response 200 (trimmed)

{
  "auditData": {
    "authToken": "[REDACTED]",
    "traceId": "D4AE54C6-…",
    "availabilityId": 946
  },
  "warnings": [
    { "type": "PRICE_CHANGE", "description": "Price has changed" },
    {
      "type": "CANCELLATION_POLICIES_CHANGE",
      "description": "Cancellation policies may have changed, please check"
    }
  ],
  "requiredField": {
    "contactPerson": ["FIRST_NAME", "LAST_NAME", "TITLE", "PHONE", "EMAIL"],
    "otherPersons": ["FIRST_NAME", "LAST_NAME", "TITLE"],
    "roomHolders": ["FIRST_NAME", "EMAIL"]
  },
  "accommodation": {
    "code": "MASTER-1782232",
    "giataId": 1312624,
    "name": "Cristine Bedfor Mahón",
    "category": { "code": "S4", "name": "4 STARS" },
    "geolocation": { "latitude": 39.887368, "longitude": 4.265355 },
    "checkIn": "2026-11-10",
    "checkOut": "2026-11-14",
    "combination": {
      "combinationKey": "eyJhbGciOiJIUzI1NiIsInppcCI6IkRFRiJ9.…",
      "rooms": [{ "description": "Garden room" }],
      "mealPlan": {
        "id": "BH",
        "type": "HALF_BOARD",
        "description": "1 BED AND BREAKFAST + 1 HALF BOARD",
        "providerDescription": "1 bed and breakfast + 1 half board"
      },
      "onRequest": false,
      "price": { "amount": 134.05, "currency": "EUR" },
      "provider": "FakeHotel",
      "cancellationPolicies": [
        { "date": "2026-09-29", "amount": { "amount": 0.0, "currency": "EUR" } },
        { "date": "2026-11-05", "amount": { "amount": 67.03, "currency": "EUR" } }
      ],
      "remarks": []
    }
  }
}

Handling warnings

warnings[] tells you the offer changed since Quote. Booking silently at a new price or on stricter terms leads to disputes.

Warning	What changed	What to do
None	Nothing	Continue to the guest form.
`PRICE_CHANGE`	The price	Show the old and the new price. Continue only after the guest explicitly accepts.	Spec
`CANCELLATION_POLICIES_CHANGE`	The cancellation terms. A refundable rate may now be non-refundable.	Show the new policy from `cancellationPolicies[]`. Continue only after the guest explicitly accepts.	Spec

Prebook can return the same warnings. Handle them the same way.

Required guest fields

requiredField lists what to collect for each guest role. Build your guest form from it, and pre-validate before Prebook.

Role	Who	Fields from
Contact person	The first person of the first room	`contactPerson[]`
Room holder	The first person of each other room	`roomHolders[]`
Other persons	Everyone else	`otherPersons[]`

Put the adult with an email address and phone number first in the first room.

Prebook enforces these lists: a listed field that is missing gets 400 with one message per person and field, for example Missing the following required field of the contact person: Birthdate. The lists vary by supplier, and a test supplier asked for BIRTH_DATE for every guest. Tested

How the common values map to guest fields at Prebook: Docs

`requiredField` value	Send in the person
`TITLE`	`courtesyTitle`: `MISTER`, `MRS` or `MS`
`FIRST_NAME`	`name`
`LAST_NAME`	`lastName`
`BIRTH_DATE`	`birthDate`, consistent with `requestedAge`
`EMAIL`	`email`
`PHONE`	`phoneCountryCode` (such as `+34`) and `phone`
`DOCUMENT`	`documentNumber` and `documentType`
`COUNTRY`	`countryId`

The full table, with PASSPORT, DOCUMENT_EXPIRY_DATE, ADDRESS and the rest, is in Rooms and guests.

With the sample response above and two rooms, the contact person needs first name, last name, title, phone and email. The first person of room 2 needs first name and email. Everyone else, children included, needs first name, last name and title. The Prebook example follows exactly this.

requestedAge is always mandatoryDocs

Send requestedAge for every guest at Prebook, even when requiredField doesn't list it. It is the age at the end of the stay and must equal the quoted age.

Gotchas

Send the new key to Prebook. Keys are tied to the step that issued them, so the Quote key fails at Prebook even before it expires. Docs
The new key expires 60 minutes after this response. Each later response restarts the clock. Docs
category is an object (code, name) here and a plain string such as S4 in datasheets. Normalise both into one type. Spec
mealPlan.type collapses mixed plans: the sample's "1 BED AND BREAKFAST + 1 HALF BOARD" has type HALF_BOARD. Show description. Docs
The price is in the microsite currency. You cannot request another. Docs

RequestCopy Anchor Link

ResponseCopy Anchor Link

Handling warningsCopy Anchor Link

Required guest fieldsCopy Anchor Link

GotchasCopy Anchor Link

RelatedCopy Anchor Link

Request

Response

Handling warnings

Required guest fields

Gotchas

Related