The seat will essentially be locked for a certain amount of time, known as the lock-in period when a user chooses a seat and navigates to the payment page to prevent several users from booking the same seat.  Hence, the client should request an API to the server in the background. “This API request should be responsible for locking the seat.

Source: GBHackers