Prerequisites

What you need before you start

Values provided by Agoda during onboarding

• CDN URL for Partner-SDK (partner.js)
• Environment configuration parameters
  • siteId
  • partnerName (Optional in case PAN tokenization is not required. Mandatory in case PAN tokenization is required)
• CSP allowlist domains
  • Agoda SDK CDN domain(s)
  • Fraud service provider endpoints
  • Analytics endpoints (e.g., Bento), if applicable
  • Card-tokenization endpoint (optional)

Your own required capability

• Ability to update your Content Security Policy (CSP). This includes allowing scripts and assets to load from our CDN and communicating with the required API endpoints.
• Ability to modify frontend code to initialize Partner-SDK and generate sdk_context_token during checkout.
• Ability to securely pass sdk_context_token from the browser to your backend without modifying it.
• Ability to include the sdk_context_token in your Book API request.
• Ability to receive statusToken from your backend, pass it back to the customer’s browser, and invoke window.partnerSDK.handleChallenge(statusToken) when requiredAction is payment_challenge and status is 202.
• Ability to poll the Booking Status API until the booking reaches a terminal outcome.