Skip to content
KBLabs
All work
Government · Hajj

Ithraa

A housing management API backbone for Saudi Hajj operators.

Year
2023
Region
Saudi Arabia
Platforms
Backend APIs
Stack
.NET · REST · SQL Server
Context

Where things stood.

Hajj operators run thousands of pilgrim rooms across Makkah and Madinah, coordinating bookings, transfers, and occupancy with government authorities and front-line staff.

The business logic is intricate, the season is short, and data lives in multiple vendor systems — the opposite of a greenfield product.

Challenge

What we were asked to solve.

The operator needed one documented, testable set of APIs that downstream apps — from field iPads to government portals — could rely on, without reinventing the domain model each time.

The APIs had to be discoverable, versioned, and unambiguous under the compressed Hajj timeline, where a bad contract change costs days.

Approach

How we built it.

We standardized the domain into a single REST API surface, with OpenAPI documentation and contract tests as the source of truth.

Legacy vendor integrations were wrapped behind clean domain endpoints so downstream teams only see pilgrims, rooms, and bookings — not the vendor quirks underneath.

Key features

What shipped.

  • Documented contracts

    OpenAPI 3.1 schema, generated client SDKs, and examples that double as integration tests.

  • Vendor abstraction

    Adapters isolate each external system; the domain model stays clean when vendors change.

  • Role-based authorization

    Operator, supervisor, agent, and government roles each see only the fields and actions they need.

  • Audit + idempotency

    Every state-changing call carries an idempotency key and writes to an append-only audit log.

Outcomes

What shipping looked like.

Replaced multi-vendor chaos
Single API surface
Machine-readable contracts
OpenAPI
Safe to change during a season
Versioned
Every change is traceable
Auditable
Tech

What's under the hood.

Runtime
.NET on Linux
Spec
OpenAPI 3.1
Storage
SQL Server + blob archive
Auth
OAuth 2.1 with role scopes
CI/CD
Azure DevOps pipelines
Next project

Sealife Connect

Egypt's first marketplace for boat owners, renters, and buyers.

Have an RFP? Have an idea? Let's build it.

We reply to every inquiry within one business day. Tell us about your project, timeline, and what success looks like.

Start a projectsales@kblabstech.com