inbook engine
This is the booking engine backend. It has no guest-facing pages of its own — the widget always renders inside the hotel's website.
The demo host site runs separately on http://127.0.0.1:8001 so that every widget request is genuinely cross-origin.
A hotel embeds the whole booking experience with two lines:
<div data-inbook-hotel="the-grand-riad"></div> <script src="https://engine-demo.bookinlay.com/embed.js" async></script>
Requests carry no cookies. Identity is the cart token in the
X-Inbook-Cart header, and each hotel key is locked to an
allowlist of origins.