OnSched API 3.22.4 — Appointment validation and tenant safety

Appointment validation

Hold and reserve requests can no longer activate slot-validation overrides by placing them in appointment custom fields. Only supported query parameters can request these overrides. Appointment, availability, scheduling list, and unavailability ID filters now return a validation error for malformed UUIDs.

V1 compatibility

Customer lookup through the v1 compatibility endpoints no longer restores a deleted customer from another company when a UUID is supplied.

Provider associations

V1 availability requests can include one or more selected providers. The compatibility layer now adds those request-scoped links without unlinking other providers configured for the service. The next GET /consumer/v1/services/{serviceId}/resources continues to return the full configured list.

Merchant Portal association saves now include the list they were based on. If another update changes those links first, the API returns 409 ASSOCIATION_CONFLICT; the portal keeps the operator's additions and removals, rebases them onto the current list, and asks the operator to review and save again. A current form save still replaces the full list, so removing a provider in the form continues to unlink it.