Find active tickets by email | NaviPartner

{
  "tickets": [
    {
      "ticketId": "string",
      "ticketNumber": "string",
      "ticketKind": "string",
      "reservationToken": "string",
      "itemNumber": "string",
      "validFrom": "string",
      "validUntil": "string",
      "issuedAt": "string",
      "blocked": true,
      "unitPrice": 1.1,
      "unitPriceInclVat": 1.1,
      "currencyCode": "string",
      "ticketHolder": "string",
      "ticketHolderLanguage": "string",
      "notificationAddress": "string",
      "printCount": 1.1,
      "printedAt": "string",
      "admissionEntitlements": 1.1,
      "description": {
        "title": "string",
        "subtitle": "string",
        "name": "string",
        "description": "string",
        "fullDescription": "string"
      }
    }
  ]
}

Looks up active tickets registered to an email — the rebooking check: is there anything to rebook before letting a change proceed. Blocked and expired tickets are excluded (BC’s activeOnly, pinned upstream rather than exposed as an option); already-admitted tickets are NOT excluded, so check admission state before treating a result as rebookable. No match is a 200 with an empty tickets array, not a 404.

Looks up active tickets registered to an email — the rebooking check: is there anything to rebook before letting a change proceed. Blocked and expired tickets are excluded (BC’s `activeOnly`, pinned upstream rather than exposed as an option); already-admitted tickets are NOT excluded, so check admission state before treating a result as rebookable. No match is a 200 with an empty tickets array, not a 404.

Authentication

AuthorizationBearer

Short-lived access token for endpoints that return personal data. Obtain one from POST /oauth/token (RFC 7523 JWT-bearer), signing the assertion with the private key of the key pair registered for your store. Sent as Authorization: Bearer <token>. This is separate from the x-entria store header, which is still required.

Short-lived access token for endpoints that return personal data. Obtain one from POST /oauth/token (RFC 7523 JWT-bearer), signing the assertion with the private key of the key pair registered for your store. Sent as `Authorization: Bearer <token>`. This is separate from the `x-entria` store header, which is still required.

Headers

x-entriastringRequired

Identifies which store this request is for. Required on every store-scoped route. It is not authentication and not a secret — it grants no privileges and is safe to send from a browser. You receive the value once your Entria backend has been created and configured. Missing header returns 400; an unknown store returns 404.

Query parameters

emailstringRequiredformat: "email"

Email address to look up active tickets for

Response

Active tickets found by an email — expired and already-consumed tickets are excluded, so an empty list does not mean the email never had tickets

ticketslist of objects

Errors

400

Bad Request Error

401

Unauthorized Error

403

Forbidden Error

429

Too Many Requests Error

500

Internal Server Error

502

Bad Gateway Error

503

Service Unavailable Error