API Endpoints

Reserve ticket

POST /reserve_ticket/

Reserves ticket for later payment.

Request body

The parameters and data of this endpoint are subjects to change since the API is still in development.

• chapter_event string Required
  The id of the chapter event tickets are being booked for.

• tickets Array<Object> Required
  A list of objects that contains information about the ticket type to reserve as well as how many of each ticket type to reserve.

  • ticket_type string Required
    The id of the ticket type to reserve.
  • count int Required
    How many of the ticket type to reserve. Minimum value is $1$.

Response

If successful a session cookie will be returned.

Response codes

Response code
201 CREATED	Reservation of tickets are successful. Receives a session cookie that is used to access the tickets.
400 BAD REQUEST	Badly formatted request. For example negative tickets.
403 FORBIDDEN	Returned if the request tried to perform forbidden operations. Such as requesting to many tickets.
404 NOT FOUND	Returned if the chapter event or ticket type to book tickets for could not be found.
500 INTERNAL SERVER ERROR	Returned when there is an unknown error with the server.

Example request

Request using curl.

curl --cookie-jar cookies.utf8 -v POST <Your URL>/reserve-ticket/ \
        --header "Content-Type:application/json" \
        --data '{
                "chapter_event": "<Event_Id>",
                "tickets":
                [
                        {
                                "ticket_type": "<Ticket Type1>",
                                "count": <Count1>
                        },
                        {
                                "ticket_type": "<Ticket Type2>"
                                "count": <Count2>
                        }
                ]
        }'

Response

< HTTP/1.1 201 Created
< Date: Sat, 29 Jun 2024 08:19:21 GMT
< Server: WSGIServer/0.2 CPython/3.12.3
< Vary: Accept, Cookie
< Allow: POST, OPTIONS
< X-Frame-Options: DENY
< Content-Length: 0
< X-Content-Type-Options: nosniff
< Referrer-Policy: same-origin
< Cross-Origin-Opener-Policy: same-origin
* Added cookie sessionid="eyJyZXNlcnZlZF9wYXltZW50IjoxMn0:1sNTIn:oqSXzVkzxHF4VCBvXiN8qkEispZdb11Y76Xcmo7ckAo" for domain localhost, path /, expire 1720858761
< Set-Cookie:  sessionid=eyJyZXNlcnZlZF9wYXltZW50IjoxMn0:1sNTIn:oqSXzVkzxHF4VCBvXiN8qkEispZdb11Y76Xcmo7ckAo; expires=Sat, 13 Jul 2024 08:19:21 GMT; HttpOnly; Max-Age=1209600; Path=/; SameSite=Lax

Reserves tickets to the event with event_id. Reserves Count1 of Type1 tickets and Count2 of Type2 tickets. Saves the response cookie in the file cookies.utf8.

Start payment

POST /start_payment/

Starts the swish payment process.

Request body

The parameters and data of this endpoint are subjects to change since the API is still in development.

• email_address string Required
  The email address of the customer where the tickets are going to be sent.

Response

If successful a swish token is sent. This token is used to interact with the users swish app.

Response codes

Response code
200 OK	Starting the payment is successful. Receives a Swish token.
400 BAD REQUEST	Returned when the data is invalid.
403 FORBIDDEN	Returned if the user session is expired or if the tickets are already paid.
408 Request timeout	The session has expired and renewal failed due to insufficient amount of tickets.
500 INTERNAL SERVER ERROR	Returned when there is an unknown error with the server.

Example request

Request using curl. The cookie.utf8 file is the same file that the request in reserve ticket created.

curl -v --cookie cookies.utf8 <Your URL>/start-payment/ \
        --header "Content-Type:application/json" \
        --data '{
                "email_address": "<EMAIL>"
        }'

Response

< HTTP/1.1 200 OK
< Date: Sat, 29 Jun 2024 08:20:29 GMT
< Server: WSGIServer/0.2 CPython/3.12.3
< Content-Type: application/json
< Vary: Accept, Cookie
< Allow: POST, OPTIONS
< X-Frame-Options: DENY
< Content-Length: 34
< X-Content-Type-Options: nosniff
< Referrer-Policy: same-origin
< Cross-Origin-Opener-Policy: same-origin
<
* Connection #0 to host localhost left intact
"e2ce062d69294373838e65f6e5d24b1c"

Starts a swish payment and returns the Swish token.

Get chapterevents

GET /get_chapterevents/

Retrieves all chapterevents where sales_stop_at has not been surpassed. Also retries all relevant tickettypes that appear among the returned chapterevents. These are organized as {"chapter_events": [...], "ticket_types": [...]}

Example of response content:

{
    "chapter_events": [
        {
            "id": 1,
            "title": "Fysikalen Dag 1",
            "description": "Första dagen av Fysikalen.",
            "event_at": "2025-12-05T18:49:12.677086+01:00",
            "max_tickets_per_payment": 8,
            "sales_stop_at": "2025-12-05T18:49:12.677086+01:00",
            "ticket_types": [
                1,
                2
            ]
        },
        {
            "id": 2,
            "title": "Fysikalen Dag 2",
            "description": "Andra dagen av Fysikalen.",
            "event_at": "2025-12-06T18:49:12.677086+01:00",
            "max_tickets_per_payment": 8,
            "sales_stop_at": "2025-12-05T18:49:12.677086+01:00",
            "ticket_types": [
                1,
                2
            ]
        }
    ],
    "ticket_types": [
        {
            "id": 1,
            "price": "199.99",
            "title": "Standardbiljett",
            "description": "En vanlig biljett."
        },
        {
            "id": 2,
            "price": "99.50",
            "title": "Studentbiljett",
            "description": "En billigare biljett."
        }
    ]
}

Validate ticket

PUT /validate_ticket/

Determines a ticket validity.

Request body

• external_id string Required
  The external id of the ticket to validate.

Response code
200 OK	Ticket was validated successfully and a response with information about the tickets validity is received.
400 BAD_REQUEST	The request body was wrongly formatted.

Example of response content:

{
  "times_used": 1,
  "status": "PAID"
}