Booking Token Validator

Generates and validates short-lived signed tokens embedded in the redirect URL from the booking form to the confirmation page. Prevents raw booking IDs from being exposed in the URL while still allowing the confirmation page to retrieve and display booking details. Returns null for expired or tampered tokens so the page can fall back gracefully.

Feature: Booking Confirmation

booking-token-validator

• Sign a token containing booking reference data on successful form submission
• Validate token signature and expiry on the confirmation page request
• Return parsed booking data or null if token is invalid or expired