Download the PHP package marcincook/laravel-renteon-api-client without Composer

Laravel Renteon API Client

A Laravel client for the Renteon REST API, with first-class support for multi-country setups (PL / ES / LT / …) and a manager-style facade familiar to Laravel developers.

Official Renteon API reference: https://demo.s2.renteon.com/en/Api/Help/Referenceex

Status

🚧 Early development — the API surface may still change before v1.0.0.

Requirements

• PHP 8.3+
• Laravel 11, 12 or 13

Installation

Publish the config:

Configuration

Set environment variables for each country you operate in:

The same set of variables is available for RENTEON_ES_* and RENTEON_LT_*. Authentication is performed transparently: the first call exchanges your credentials for an access token (POST /token with a Base64(SHA512(…)) signature), then re-uses it for the rest of the request lifecycle.

Quick start

You can also use the Renteon facade:

Resources

Each resource maps to a slice of the Renteon REST API. Method signatures are kept close to the upstream model names so the official reference is your primary documentation.

Booking flow example

The typical "public-facing booking site → Renteon" pipeline looks like this:

Verified gotchas (production, confirmed with Renteon)

Hard-won lessons from a live integration — get these wrong and ExBooking/Save returns an opaque 500 "Nullable object must have a value":

• BookingTypeId must be 2 (Reservation), not 1 (Contract) for a web booking. Type 1 is the single biggest cause of the 500. Pair with BookingSubTypeId = 6 (Reservation).
• Dates must be UTC Zulu (2026-06-12T08:00:00Z). An explicit local offset (+02:00) trips a .NET DateTime.Kind conversion error on Create and Save.
• Save requires at least one Booking_Drivers entry — without it the server dereferences a null (500). A minimal driver {AddressBookId, SortOrder, IsDriverLicenceDomestic:false, IsPassportDomestic:false, IsIdCardDomestic:false} is enough; the client must have an address book address.
• Create requires a PricelistId on the AvailabilityCarCategory. You may override the amounts (Amount/Total/TotalDeposit) with your own prices, but the category must reference an existing Renteon pricelist.
• The client needs ≥1 PersonIdentification (e.g. type 3 = Driver license), or Calculate/Save return 422.
• The API user must be a member of the booking's offices (Renteon panel → user → "Offices") or Availability returns 0 categories.
• The /token request expects office_id (snake_case) — non-"External" users require it; the External flag is mandatory for machine auth (otherwise a new-device email verification kicks in).

Scope note: this ExBooking/* (External) API is fine when the CMS owns pricing and overrides amounts. For a Renteon-priced, multi-instance storefront, Renteon recommends the Aggregator API (aggregator.renteon.com, HTTP Basic) instead.

Customer booking history

getBookingsByClient() returns a customer's full history. ClientId is the only search filter that actually narrows to one customer (ClientIds/AddressBookId are ignored). The rich export projection (Number, dates, office, car category, Total/TotalDeposit/TotalDomestic, BookingSubTypeCode, IsCancelled, Client*) is enough to render a "my bookings" view without a per-booking call.

Email lookup caveat: AddressBook::findByEmail() is unreliable — Renteon has no email search filter, so it pages the address book and matches client-side and can miss the customer on a large base. Store the Renteon ClientId locally (per customer) when you create the booking, and look up history by that id.

Reports

Reports::getRealizationByOffice() uses a different authentication flow — set either RENTEON_REPORT_TOKEN (a raw bearer token captured from the Renteon panel) or RENTEON_REPORT_USERNAME/RENTEON_REPORT_PASSWORD/RENTEON_REPORT_OFFICE_ID. If neither is set, the client falls back to the country token.

Caching

Dictionary endpoints (offices, countries, payment types, document types) are cached using the Laravel cache repository, keyed per country. TTL defaults to 24h and is configurable via RENTEON_DICT_CACHE_TTL (seconds). Use the clearCache() method on each resource to invalidate.

Error handling

All HTTP failures bubble up as exceptions:

• MarcinCook\RenteonApi\Exceptions\RenteonAuthException — /token endpoint failed or returned no access_token.
• MarcinCook\RenteonApi\Exceptions\RenteonHttpException — any other non-2xx response. The original Illuminate\Http\Client\Response is attached as ->response.
• MarcinCook\RenteonApi\Exceptions\RenteonException — base class for both.

The two top-level dictionary getters (getOffices, getCountries) deliberately swallow API failures and log a warning — they're used in dropdowns where a transient outage shouldn't break the page.

Testing

License

MIT — see LICENSE.