Credit Card Payments
Credit card payments contain highly sensitive data. Due to PCI-DSS compliance requirements, a special workflow is necessary for this type of payment.
⚠️ Credit card data must never be sent through the API-Proxy. Always switch to the Navitaire URL for the Add Payment step. This only applies to the production environment! For testing purposes, for Test (Playground) can be requested as well via an email to api.flightproduction@tui.com if needed.
⚠️ This applies only to credit card payments! All other payment types can be sent to the regular API-Proxy URL.
Workflow
Perform your regular workflow using our API-Proxy:
Only the request {{Url}}/api/nsk/vX/booking/payments requires a different URL, when the payment is related to credit cards. This is identified by the paymentMethodCode parameter.
Those requests must be forwarded to a Navitaire URL instead. You will receive the URL once your payment request is approved.
Requesting Credit Card Payment Access
To make use of this payment process, you need to inform us. Please provide your public IPs that will be used for payments. Request a payment whitelisting by sending an email to api.flightproduction@tui.com.
Once your whitelisting is applied, the payment URL will be forwarded to you and you can start making payments through that URL.
Blocking of Payment Requests
Payments with the following PaymentMethodCodes will be blocked on our regular API-Proxy in the future: AE, AX, AY, DI, DL, DS, KE, LA, LS, MA, MB, MC, MD, ME, MP, MY, TF, TK, TY, VB, VE, VI, VS, VY.
Contact
For any further questions, please reach out to api.flightproduction@tui.com.
