Changelog Customers

The field CustomerConnectRequest.temporaryCustomerNumber is now deprecated and replaced by CustomerConnectRequest.customerNumberToConnect. This is to reflect that both temporary and permanent customer can be connected to a different customer.

Password is now optional when creating a customer profile. This also applies when converting a temporary profile to a regular profile.

Email is no longer mandatory when converting a temporary profile to a regular profile.

The HTTP response code remains 400, but the error code within the response object is now consistently 605 in the event of a validation error for the customer telephone number fields.

Dummy values for first name and surname in update endpoints will be converted to an empty string. Dummy values in existing profiles will also be converted to an empty string upon retrieval. This change applies to all endpoints that update or retrieve customer profiles. Values that will be replaced include 'ikke satt', 'ikkesatt' (in any casing), and all values consisting solely of whitespace or combinations of whitespace and the characters _-.*.

Removed query parameter "netexAuthorityId" from GET /client/consents and GET /admin/consents endpoints

Added endpoint to get customer accounts by customer number. See the endpoint GET /profiles/{customerNumber}/customer-accounts

Add includeExpiredContracts to GET /contract-consumers/{customerNumber}/contracts.

Some deprecated and unused endpoints are removed. All of the endpoints were either not exposed in the proxy, or for internal use. Therefore, the removals should not result in any breaking changes, but the OpenApi spec might contain some changes. These are the removed endpoints:

• /countries
• /consents/v1
• /post-codes
• /error-messages
• /blacklisted-phones
• /customers/{customerNumber}/personnel-ticket-bearer
• /customers/{customerNumber}/customer-numbers
• /customers/{customerNumber}/customer-references
• /profiles/{customerNumber}/personnel-ticket-bearer
• /profiles/{customerNumber}/customer-numbers
• /profiles/{customerNumber}/customer-references

Fix GET /loyaltyprograms/company-managed-programs/loyaltyProgramId to not 404 on draft LoyaltyProgram with versions

Changes to endpoints:

• Add GET /loyaltyprograms/company-managed-programs/{loyaltyProgramId} to fetch a company managed program
• Fix GET /loyaltyprograms/company-managed-programs to not 404 on draft LoyaltyProgram with versions

When searching for profiles with /profiles or /profiles-search using telephone numbers, the parameters countryCode and telephoneNumberNoCountryCode should be used. Both must be specified. Using the telephoneNumber parameter is deprecated and may not return all results.

CustomerResponse.telephoneNumber is a deprecated field and should not be used. After this change, the value of CustomerResponse.telephoneNumber will always mirror CustomerReponse.countryCode and CustomerResponse.telephoneNumberNoCountryCode, if those fields are filled out. Previously it could return an outdated value.

Added endpoint POST /benefits/contracts/claim-contract Calling the endpoint will attempt to connect a customer to a company managed loyalty program, giving the customer benefits and entitlements connected to that loyalty program.

Update PATCH /loyaltyprograms/{loyaltyProgramId}/contracts/{contractUuid} to include couponsLimit in request body

Updated deployment to new cloud setup.

Consents service moved to new cluster

Removed endpoint PUT /profiles/{customerNumber}/reset-uuid

Updated format of DatedServiceJourney and OriginalDatedServiceJourney to [A-Z]{3}:DatedServiceJourney:[0-9a-zA-Z_-]+ This supports external DSJs and not just internal ones.

Existing endpoint PATCH /profiles/{customerNumber}/customer-accounts/{accountId} now uses {accountId} (string) instead of unique DB id (long) for updating customer accounts.

New endpoint DELETE /profiles/{customerNumber}/customer-accounts/{accountId} for customer accounts. Access to customer is required to delete their customer account

Add permission store to customers. Internal token or special permission is needed for access to all customers .

CustomerPutRequest validation no longer fails when customerAccountId (deprecated) is empty, and the customer profile has a customer account.

Added optional Vipps id to endpoints for creating and changing customer profile. See the endpoints POST /profiles and PUT /profiles/{customerNumber}

Added optional search parameter Vipps id to GET /profiles.

Added optional boolean parameter excludeSubContracts to /benefits/entitlements/{customerNumber}/by-customer-number When set to true, the endpoint will not return day trip entitlements. The default value is false

Constraint on setting effective cancellation date to a previous year in a OrderLineEventRequest. It is not supported by the system.

New endpoint /customer-accounts/{accountId}/profiles for getting customer profile by customer account id.

New endpoint /profile-search for paginated customer search. Default number of customers per page is 50. Default page is 1.

Adding two new parameters for endpoints that supply contracts, includeOrderLineEvents and includeConsumers. Default values (when the parameters are not present) mean that no order line events are included and only the contract owner. See also the swagger documentation. Note that when not asking for order line events, the response will not contain an empty list, but a null.

EcardNumber16Digits is optional in create and update requests.If not set, it will be calculated based on ecard number and operator.

Adding status field for ContractResponse and SimpleContractResponse

• The status field is used to show if the contract has been expired, misused or refunded.
• The status field is default valid.

Fraud prevention on /contracts/{externalRef}/by-external-ref

• The client has to use header: Entur-Customer-Number to enable the fraud prevention. Logged in user will be used as value.
• The application will block the customer if the customer tries with many invalid external refs.
• The application will increase delay for each invalid external ref used by the customer.
• The application will prevent the customer to do simultaneously calls.
• This will prevent users to indefinitely try to find contracts.
• It is used by /contracts/claim-personnel-ticket to prevent users from guessing lots of personnel ticket references.