asriz7777 / FXSCRIPTS-TEST-AUTOMATION

0 stars 1 forks source link

Vulnerability [Hijack_Level1] : POST:/api/v1/user-variable #425

Open asriz7777 opened 5 years ago

asriz7777 commented 5 years ago

Project : FXABAC TEST

Template : ApiV1UserVariablePostUservariableuserbDisallowHijack1

Run Id : 8a808011699a990101699ab0f9761b20

Job : Default

Env : Default

Category : Hijack_Level1

Tags : [FX Top 10 - API Vulnerability, Data_Access_Control]

Severity : Major

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 400

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MmM1ZDc5ZjktN2I4OS00NWRiLWFjNWEtODFkMGVlZDEwZjUz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:54 GMT]}

Endpoint : http://13.56.210.25/api/v1/user-variable

Request :
{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "fzWtI4ze", "organization" : { "billingEmail" : "krystina.kirlin@gmail.com", "company" : "King-King", "createdBy" : "", "createdDate" : "", "description" : "fzWtI4ze", "id" : "", "inactive" : false, "location" : "fzWtI4ze", "modifiedBy" : "", "modifiedDate" : "", "name" : "fzWtI4ze", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "fzWtI4ze", "version" : "" }

Response :
{ "timestamp" : "2019-03-20T10:41:54.377+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }

Logs :
2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/orgs] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Request [{ "billingEmail" : "RiIZtB1s", "company" : "Simonis, Simonis and Simonis", "createdBy" : "", "createdDate" : "", "description" : "RiIZtB1s", "id" : "", "inactive" : false, "location" : "RiIZtB1s", "modifiedBy" : "", "modifiedDate" : "", "name" : "RiIZtB1s", "orgPlan" : "TEAM", "orgType" : "ENTERPRISE", "version" : "" }] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:48.649+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs" }] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlmMDBmY2EtMTk5MC00ODdlLTk2MGItMDE0MjcwMGY1ZmFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:47 GMT]}] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : StatusCode [403] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Time [425] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1] : Size [121] 2019-03-20 10:41:48 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [403 == 200 OR 403 == 201] result [Failed] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlmMDBmY2EtMTk5MC00ODdlLTk2MGItMDE0MjcwMGY1ZmFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:47 GMT]}] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlmMDBmY2EtMTk5MC00ODdlLTk2MGItMDE0MjcwMGY1ZmFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:47 GMT]}] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlmMDBmY2EtMTk5MC00ODdlLTk2MGItMDE0MjcwMGY1ZmFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:47 GMT]}] 2019-03-20 10:41:48 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlmMDBmY2EtMTk5MC00ODdlLTk2MGItMDE0MjcwMGY1ZmFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:47 GMT]}] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/accounts] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Request [{ "accessKey" : "HQPiMf4m", "accountType" : "GitLab", "createdBy" : "", "createdDate" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "HQPiMf4m", "org" : "", "prop1" : "HQPiMf4m", "prop2" : "HQPiMf4m", "prop3" : "HQPiMf4m", "region" : "HQPiMf4m", "secretKey" : "HQPiMf4m", "version" : "" }] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:49.151+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 11, column: 11] (through reference chain: com.fxlabs.fxt.dto.clusters.Account[\"org\"])", "path" : "/api/v1/accounts" }] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzU1M2Q0MDItNzhlOC00MDZiLTk2NzUtNTkyOTlkMTg2MDMw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Time [500] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1] : Size [722] 2019-03-20 10:41:49 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzU1M2Q0MDItNzhlOC00MDZiLTk2NzUtNTkyOTlkMTg2MDMw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzU1M2Q0MDItNzhlOC00MDZiLTk2NzUtNTkyOTlkMTg2MDMw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzU1M2Q0MDItNzhlOC00MDZiLTk2NzUtNTkyOTlkMTg2MDMw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzU1M2Q0MDItNzhlOC00MDZiLTk2NzUtNTkyOTlkMTg2MDMw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/skills] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Request [{ "accessKey" : "OVd24g6P", "createdBy" : "", "createdDate" : "", "description" : "OVd24g6P", "host" : "OVd24g6P", "id" : "", "inactive" : false, "key" : "OVd24g6P", "modifiedBy" : "", "modifiedDate" : "", "name" : "OVd24g6P", "org" : "", "prop1" : "OVd24g6P", "prop2" : "OVd24g6P", "prop3" : "OVd24g6P", "prop4" : "OVd24g6P", "prop5" : "OVd24g6P", "secretKey" : "OVd24g6P", "skillType" : "BOT_DEPLOYMENT", "version" : "" }] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:49.545+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 13, column: 11] (through reference chain: com.fxlabs.fxt.dto.skills.Skill[\"org\"])", "path" : "/api/v1/skills" }] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTg2OWY5NmItOTgzMC00OTJhLWE3ODMtY2I4YTc0OTAyYmVh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Time [392] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1] : Size [716] 2019-03-20 10:41:49 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTg2OWY5NmItOTgzMC00OTJhLWE3ODMtY2I4YTc0OTAyYmVh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTg2OWY5NmItOTgzMC00OTJhLWE3ODMtY2I4YTc0OTAyYmVh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTg2OWY5NmItOTgzMC00OTJhLWE3ODMtY2I4YTc0OTAyYmVh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:49 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTg2OWY5NmItOTgzMC00OTJhLWE3ODMtY2I4YTc0OTAyYmVh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:48 GMT]}] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request [{ "account" : "", "createdBy" : "", "createdDate" : "", "description" : "gBb9gVSz", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "gBb9gVSz", "org" : "", "prop1" : "gBb9gVSz", "prop2" : "gBb9gVSz", "prop3" : "gBb9gVSz", "prop4" : "gBb9gVSz", "prop5" : "gBb9gVSz", "skill" : "", "state" : "INACTIVE", "version" : "", "visibility" : "ORG_PUBLIC" }] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:50.078+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.it.IssueTracker[\"account\"])", "path" : "/api/v1/issue-trackers/issue-tracker-bot" }] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzQ4ZDZiMDEtMzY1ZS00ZDMyLTlhNTItMjgzZjQxZGE1MmU2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Time [524] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1] : Size [768] 2019-03-20 10:41:50 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzQ4ZDZiMDEtMzY1ZS00ZDMyLTlhNTItMjgzZjQxZGE1MmU2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzQ4ZDZiMDEtMzY1ZS00ZDMyLTlhNTItMjgzZjQxZGE1MmU2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzQ4ZDZiMDEtMzY1ZS00ZDMyLTlhNTItMjgzZjQxZGE1MmU2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzQ4ZDZiMDEtMzY1ZS00ZDMyLTlhNTItMjgzZjQxZGE1MmU2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "925700918", "branch" : "cJFdEh8q", "bugsOpen" : "925700918", "createdBy" : "", "createdDate" : "", "description" : "cJFdEh8q", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "cJFdEh8q", "issueTracker" : "", "lastCommit" : "cJFdEh8q", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "cJFdEh8q", "openAPISpec" : "cJFdEh8q", "openText" : "cJFdEh8q", "org" : "", "props" : null, "url" : "cJFdEh8q", "version" : "" }] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:50.515+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWE1NDRmMWEtOGExOC00YWZiLWEzZDYtMjZmZGYxY2Y2ZDY3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Time [434] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1] : Size [744] 2019-03-20 10:41:50 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWE1NDRmMWEtOGExOC00YWZiLWEzZDYtMjZmZGYxY2Y2ZDY3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWE1NDRmMWEtOGExOC00YWZiLWEzZDYtMjZmZGYxY2Y2ZDY3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWE1NDRmMWEtOGExOC00YWZiLWEzZDYtMjZmZGYxY2Y2ZDY3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:50 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWE1NDRmMWEtOGExOC00YWZiLWEzZDYtMjZmZGYxY2Y2ZDY3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:49 GMT]}] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Request [{ "baseUrl" : "MUlpDoOG", "createdBy" : "", "createdDate" : "", "description" : "MUlpDoOG", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "MUlpDoOG", "projectId" : "", "refId" : "MUlpDoOG", "version" : "" }] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:41:51.151+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : null, "value" : "Invalid project." } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTEyZmYxODUtMDFlZS00NTM1LWI4ZmItMDdlYTI3ODk0NTcx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:51 GMT]}] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : StatusCode [200] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Time [635] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1] : Size [192] 2019-03-20 10:41:51 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTEyZmYxODUtMDFlZS00NTM1LWI4ZmItMDdlYTI3ODk0NTcx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:51 GMT]}] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTEyZmYxODUtMDFlZS00NTM1LWI4ZmItMDdlYTI3ODk0NTcx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:51 GMT]}] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTEyZmYxODUtMDFlZS00NTM1LWI4ZmItMDdlYTI3ODk0NTcx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:51 GMT]}] 2019-03-20 10:41:51 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTEyZmYxODUtMDFlZS00NTM1LWI4ZmItMDdlYTI3ODk0NTcx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:51 GMT]}] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "yxWS3MzM", "organization" : { "billingEmail" : "mauricio.monahan@gmail.com", "company" : "Zulauf, Zulauf and Zulauf", "createdBy" : "", "createdDate" : "", "description" : "yxWS3MzM", "id" : "", "inactive" : false, "location" : "yxWS3MzM", "modifiedBy" : "", "modifiedDate" : "", "name" : "yxWS3MzM", "orgPlan" : "ENTERPRISE", "orgType" : "PERSONAL", "version" : "" }, "project" : "", "scope" : "Environment", "value" : "yxWS3MzM", "version" : "" }] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:52.220+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNGMyMWEtOTZjYy00M2RlLWJiMGQtZWNjOTE4YTEyNWEz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Time [668] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1] : Size [750] 2019-03-20 10:41:52 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNGMyMWEtOTZjYy00M2RlLWJiMGQtZWNjOTE4YTEyNWEz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNGMyMWEtOTZjYy00M2RlLWJiMGQtZWNjOTE4YTEyNWEz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNGMyMWEtOTZjYy00M2RlLWJiMGQtZWNjOTE4YTEyNWEz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNGMyMWEtOTZjYy00M2RlLWJiMGQtZWNjOTE4YTEyNWEz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Request [{ "baseUrl" : "NmsNr9Q4", "createdBy" : "", "createdDate" : "", "description" : "NmsNr9Q4", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "NmsNr9Q4", "projectId" : "NmsNr9Q4", "refId" : "NmsNr9Q4", "version" : "" }] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:41:52.682+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : "", "value" : "No value present" } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OWM0OTkxMjktZjUzNi00MWNjLWI3OTUtNmVkYzc1OTU5YjU1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : StatusCode [200] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Time [464] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1] : Size [190] 2019-03-20 10:41:52 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OWM0OTkxMjktZjUzNi00MWNjLWI3OTUtNmVkYzc1OTU5YjU1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OWM0OTkxMjktZjUzNi00MWNjLWI3OTUtNmVkYzc1OTU5YjU1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OWM0OTkxMjktZjUzNi00MWNjLWI3OTUtNmVkYzc1OTU5YjU1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:52 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OWM0OTkxMjktZjUzNi00MWNjLWI3OTUtNmVkYzc1OTU5YjU1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:52 GMT]}] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "822857372", "branch" : "DQYi2MKq", "bugsOpen" : "822857372", "createdBy" : "", "createdDate" : "", "description" : "DQYi2MKq", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "DQYi2MKq", "issueTracker" : "", "lastCommit" : "DQYi2MKq", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "DQYi2MKq", "openAPISpec" : "DQYi2MKq", "openText" : "DQYi2MKq", "org" : "", "props" : null, "url" : "DQYi2MKq", "version" : "" }] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:53.336+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGE4YjkwMDUtMzgwYy00NzdkLTg0MjMtNzk5ODY0NDQxOWFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:53 GMT]}] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : StatusCode [400] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Time [642] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1] : Size [744] 2019-03-20 10:41:53 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGE4YjkwMDUtMzgwYy00NzdkLTg0MjMtNzk5ODY0NDQxOWFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:53 GMT]}] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGE4YjkwMDUtMzgwYy00NzdkLTg0MjMtNzk5ODY0NDQxOWFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:53 GMT]}] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGE4YjkwMDUtMzgwYy00NzdkLTg0MjMtNzk5ODY0NDQxOWFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:53 GMT]}] 2019-03-20 10:41:53 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGE4YjkwMDUtMzgwYy00NzdkLTg0MjMtNzk5ODY0NDQxOWFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:53 GMT]}] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Method [POST] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "fzWtI4ze", "organization" : { "billingEmail" : "krystina.kirlin@gmail.com", "company" : "King-King", "createdBy" : "", "createdDate" : "", "description" : "fzWtI4ze", "id" : "", "inactive" : false, "location" : "fzWtI4ze", "modifiedBy" : "", "modifiedDate" : "", "name" : "fzWtI4ze", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "fzWtI4ze", "version" : "" }] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response [{ "timestamp" : "2019-03-20T10:41:54.377+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MmM1ZDc5ZjktN2I4OS00NWRiLWFjNWEtODFkMGVlZDEwZjUz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:54 GMT]}] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : StatusCode [400] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Time [930] 2019-03-20 10:41:54 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Size [750] 2019-03-20 10:41:54 ERROR [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [400 == 401 OR 400 == 403] result [Failed] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : URL [http://13.56.210.25/api/v1/user-variable/] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Method [DELETE] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request [null] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response [{ "timestamp" : "2019-03-20T10:41:55.072+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/user-variable/" }] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response-Headers [{Allow=[POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzVkNDZkY2MtOGUyZC00ZmEyLWE5NzctNTZkY2NjNzI3NWE3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:54 GMT]}] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : StatusCode [405] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Time [699] 2019-03-20 10:41:55 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Size [168] 2019-03-20 10:41:55 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : URL [http://13.56.210.25/api/v1/envs/] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Method [DELETE] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request [null] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response [{ "timestamp" : "2019-03-20T10:41:55.664+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/envs/" }] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response-Headers [{Allow=[PUT, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjgzNTQ3YmUtNTIwNS00MDMzLTgxMWEtYzgxZjFiYWY1MjEw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:55 GMT]}] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : StatusCode [405] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Time [584] 2019-03-20 10:41:55 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Size [159] 2019-03-20 10:41:55 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : URL [http://13.56.210.25/api/v1/projects/] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Method [DELETE] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request [null] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response [{ "timestamp" : "2019-03-20T10:41:56.141+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/projects/" }] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YmZlMzQyMzYtM2UzMy00MmYxLTk4ODctMjU0YzRhOGNmNmZk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:55 GMT]}] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : StatusCode [405] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Time [477] 2019-03-20 10:41:56 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Size [163] 2019-03-20 10:41:56 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot/] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Method [DELETE] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request [null] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response [{ "timestamp" : "2019-03-20T10:41:56.580+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/issue-trackers/issue-tracker-bot/" }] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response-Headers [{Allow=[POST, GET, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=M2YxZDg4ZGMtM2RiYS00ZWE3LWI3MTktZGZhMGIwZmRlMmE1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:56 GMT]}] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : StatusCode [405] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Time [439] 2019-03-20 10:41:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Size [187] 2019-03-20 10:41:56 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : URL [http://13.56.210.25/api/v1/skills/] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Method [DELETE] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request [null] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response [{ "timestamp" : "2019-03-20T10:41:57.163+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/skills/" }] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGVmOTVmNzItZTA3Ny00ZmU2LTljNjEtMDc2ZDA1ZmI4MjZk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:56 GMT]}] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : StatusCode [405] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Time [580] 2019-03-20 10:41:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Size [161] 2019-03-20 10:41:57 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : URL [http://13.56.210.25/api/v1/accounts/] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Method [DELETE] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request [null] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response [{ "timestamp" : "2019-03-20T10:41:57.561+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/accounts/" }] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=Y2YxMzFkYjQtYjlkZi00ZjdjLTgyMDAtMWExZDI3ZjQ3OGYx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:57 GMT]}] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : StatusCode [405] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Time [397] 2019-03-20 10:41:57 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Size [163] 2019-03-20 10:41:57 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : URL [http://13.56.210.25/api/v1/orgs/] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Method [DELETE] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request [null] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response [{ "timestamp" : "2019-03-20T10:41:58.057+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/orgs/" }] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODMzOWJiN2ItMzBkNS00NzliLTgwMmItMDI4MDBiZmI1N2Zh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:41:57 GMT]}] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : StatusCode [405] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Time [495] 2019-03-20 10:41:58 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Size [159] 2019-03-20 10:41:58 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed]

--- FX Bot ---

asriz7777 commented 5 years ago

Project : FXABAC TEST

Template : ApiV1UserVariablePostUservariableuserbDisallowHijack1

Run Id : 8a808011699a990101699ab3901a2277

Job : Default

Env : Default

Category : Hijack_Level1

Tags : [FX Top 10 - API Vulnerability, Data_Access_Control]

Severity : Major

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 400

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MTk5NmU3N2QtZWJmYS00MTJjLWEyMjItYzQ5MDNlMTczMDdh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:50 GMT]}

Endpoint : http://13.56.210.25/api/v1/user-variable

Request :
{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "KNTBLanK", "organization" : { "billingEmail" : "michel.ziemann@yahoo.com", "company" : "Dooley, Dooley and Dooley", "createdBy" : "", "createdDate" : "", "description" : "KNTBLanK", "id" : "", "inactive" : false, "location" : "KNTBLanK", "modifiedBy" : "", "modifiedDate" : "", "name" : "KNTBLanK", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "KNTBLanK", "version" : "" }

Response :
{ "timestamp" : "2019-03-20T10:44:51.477+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }

Logs :
2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/orgs] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Request [{ "billingEmail" : "iR2hjbIl", "company" : "Kozey LLC", "createdBy" : "", "createdDate" : "", "description" : "iR2hjbIl", "id" : "", "inactive" : false, "location" : "iR2hjbIl", "modifiedBy" : "", "modifiedDate" : "", "name" : "iR2hjbIl", "orgPlan" : "TEAM", "orgType" : "ENTERPRISE", "version" : "" }] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:42.438+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs" }] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWFiYTE5NjItODQwMS00MTJkLTlhMmMtYmU1NTlkZGE3YWYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : StatusCode [403] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Time [1193] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1] : Size [121] 2019-03-20 10:44:42 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [403 == 200 OR 403 == 201] result [Failed] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWFiYTE5NjItODQwMS00MTJkLTlhMmMtYmU1NTlkZGE3YWYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWFiYTE5NjItODQwMS00MTJkLTlhMmMtYmU1NTlkZGE3YWYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWFiYTE5NjItODQwMS00MTJkLTlhMmMtYmU1NTlkZGE3YWYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:42 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWFiYTE5NjItODQwMS00MTJkLTlhMmMtYmU1NTlkZGE3YWYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/accounts] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Request [{ "accessKey" : "Zxeq7pW1", "accountType" : "GitLab", "createdBy" : "", "createdDate" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "Zxeq7pW1", "org" : "", "prop1" : "Zxeq7pW1", "prop2" : "Zxeq7pW1", "prop3" : "Zxeq7pW1", "region" : "Zxeq7pW1", "secretKey" : "Zxeq7pW1", "version" : "" }] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:43.218+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 11, column: 11] (through reference chain: com.fxlabs.fxt.dto.clusters.Account[\"org\"])", "path" : "/api/v1/accounts" }] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTJiZGEzOTMtMjlhMS00NDMwLWFjNmEtMWY3NDU5ODIzMDIx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Time [776] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1] : Size [722] 2019-03-20 10:44:43 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTJiZGEzOTMtMjlhMS00NDMwLWFjNmEtMWY3NDU5ODIzMDIx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTJiZGEzOTMtMjlhMS00NDMwLWFjNmEtMWY3NDU5ODIzMDIx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTJiZGEzOTMtMjlhMS00NDMwLWFjNmEtMWY3NDU5ODIzMDIx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:43 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTJiZGEzOTMtMjlhMS00NDMwLWFjNmEtMWY3NDU5ODIzMDIx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:42 GMT]}] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/skills] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Request [{ "accessKey" : "618m1hEt", "createdBy" : "", "createdDate" : "", "description" : "618m1hEt", "host" : "618m1hEt", "id" : "", "inactive" : false, "key" : "618m1hEt", "modifiedBy" : "", "modifiedDate" : "", "name" : "618m1hEt", "org" : "", "prop1" : "618m1hEt", "prop2" : "618m1hEt", "prop3" : "618m1hEt", "prop4" : "618m1hEt", "prop5" : "618m1hEt", "secretKey" : "618m1hEt", "skillType" : "BOT_DEPLOYMENT", "version" : "" }] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:44.097+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 13, column: 11] (through reference chain: com.fxlabs.fxt.dto.skills.Skill[\"org\"])", "path" : "/api/v1/skills" }] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjYwZTEwNmYtODY4ZS00ZTA3LTg2ZWItY2Q0YTkwMjc1MmNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:43 GMT]}] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Time [877] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1] : Size [716] 2019-03-20 10:44:44 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjYwZTEwNmYtODY4ZS00ZTA3LTg2ZWItY2Q0YTkwMjc1MmNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:43 GMT]}] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjYwZTEwNmYtODY4ZS00ZTA3LTg2ZWItY2Q0YTkwMjc1MmNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:43 GMT]}] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjYwZTEwNmYtODY4ZS00ZTA3LTg2ZWItY2Q0YTkwMjc1MmNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:43 GMT]}] 2019-03-20 10:44:44 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjYwZTEwNmYtODY4ZS00ZTA3LTg2ZWItY2Q0YTkwMjc1MmNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:43 GMT]}] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request [{ "account" : "", "createdBy" : "", "createdDate" : "", "description" : "eiYnWYQ5", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "eiYnWYQ5", "org" : "", "prop1" : "eiYnWYQ5", "prop2" : "eiYnWYQ5", "prop3" : "eiYnWYQ5", "prop4" : "eiYnWYQ5", "prop5" : "eiYnWYQ5", "skill" : "", "state" : "INACTIVE", "version" : "", "visibility" : "ORG_PUBLIC" }] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:45.093+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.it.IssueTracker[\"account\"])", "path" : "/api/v1/issue-trackers/issue-tracker-bot" }] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGY0YWRhM2ItMGZiNS00MzUyLWIzNWYtZjNkZGExZDE4ZWQ5; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:44 GMT]}] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Time [993] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1] : Size [768] 2019-03-20 10:44:45 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGY0YWRhM2ItMGZiNS00MzUyLWIzNWYtZjNkZGExZDE4ZWQ5; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:44 GMT]}] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGY0YWRhM2ItMGZiNS00MzUyLWIzNWYtZjNkZGExZDE4ZWQ5; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:44 GMT]}] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGY0YWRhM2ItMGZiNS00MzUyLWIzNWYtZjNkZGExZDE4ZWQ5; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:44 GMT]}] 2019-03-20 10:44:45 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGY0YWRhM2ItMGZiNS00MzUyLWIzNWYtZjNkZGExZDE4ZWQ5; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:44 GMT]}] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "1384094820", "branch" : "HAFSZhDu", "bugsOpen" : "1384094820", "createdBy" : "", "createdDate" : "", "description" : "HAFSZhDu", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "HAFSZhDu", "issueTracker" : "", "lastCommit" : "HAFSZhDu", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "HAFSZhDu", "openAPISpec" : "HAFSZhDu", "openText" : "HAFSZhDu", "org" : "", "props" : null, "url" : "HAFSZhDu", "version" : "" }] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:46.312+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDNlYTc1YWYtMDg0YS00MmViLWI5NTQtYmEzMDg2YWUzMmZj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:45 GMT]}] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Time [1218] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1] : Size [744] 2019-03-20 10:44:46 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDNlYTc1YWYtMDg0YS00MmViLWI5NTQtYmEzMDg2YWUzMmZj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:45 GMT]}] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDNlYTc1YWYtMDg0YS00MmViLWI5NTQtYmEzMDg2YWUzMmZj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:45 GMT]}] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDNlYTc1YWYtMDg0YS00MmViLWI5NTQtYmEzMDg2YWUzMmZj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:45 GMT]}] 2019-03-20 10:44:46 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDNlYTc1YWYtMDg0YS00MmViLWI5NTQtYmEzMDg2YWUzMmZj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:45 GMT]}] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Request [{ "baseUrl" : "ptrqjEnf", "createdBy" : "", "createdDate" : "", "description" : "ptrqjEnf", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "ptrqjEnf", "projectId" : "", "refId" : "ptrqjEnf", "version" : "" }] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:44:47.144+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : null, "value" : "Invalid project." } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTg2MzNjMDMtZTM5Yy00Yzc5LWI0N2QtOGQ2M2UyZTEyMzMz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:46 GMT]}] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : StatusCode [200] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Time [833] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1] : Size [192] 2019-03-20 10:44:47 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTg2MzNjMDMtZTM5Yy00Yzc5LWI0N2QtOGQ2M2UyZTEyMzMz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:46 GMT]}] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTg2MzNjMDMtZTM5Yy00Yzc5LWI0N2QtOGQ2M2UyZTEyMzMz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:46 GMT]}] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTg2MzNjMDMtZTM5Yy00Yzc5LWI0N2QtOGQ2M2UyZTEyMzMz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:46 GMT]}] 2019-03-20 10:44:47 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTg2MzNjMDMtZTM5Yy00Yzc5LWI0N2QtOGQ2M2UyZTEyMzMz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:46 GMT]}] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "Z3Bs09PX", "organization" : { "billingEmail" : "katlynn.bednar@hotmail.com", "company" : "Runolfsdottir, Runolfsdottir and Runolfsdottir", "createdBy" : "", "createdDate" : "", "description" : "Z3Bs09PX", "id" : "", "inactive" : false, "location" : "Z3Bs09PX", "modifiedBy" : "", "modifiedDate" : "", "name" : "Z3Bs09PX", "orgPlan" : "ENTERPRISE", "orgType" : "PERSONAL", "version" : "" }, "project" : "", "scope" : "Environment", "value" : "Z3Bs09PX", "version" : "" }] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:48.277+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2I0ZmY5MTUtYThmOS00ODhkLTk5YWItNGUxOGI3NmE5NTRm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:47 GMT]}] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Time [1029] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1] : Size [750] 2019-03-20 10:44:48 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2I0ZmY5MTUtYThmOS00ODhkLTk5YWItNGUxOGI3NmE5NTRm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:47 GMT]}] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2I0ZmY5MTUtYThmOS00ODhkLTk5YWItNGUxOGI3NmE5NTRm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:47 GMT]}] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2I0ZmY5MTUtYThmOS00ODhkLTk5YWItNGUxOGI3NmE5NTRm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:47 GMT]}] 2019-03-20 10:44:48 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2I0ZmY5MTUtYThmOS00ODhkLTk5YWItNGUxOGI3NmE5NTRm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:47 GMT]}] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Request [{ "baseUrl" : "LwMh7D2H", "createdBy" : "", "createdDate" : "", "description" : "LwMh7D2H", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "LwMh7D2H", "projectId" : "LwMh7D2H", "refId" : "LwMh7D2H", "version" : "" }] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:44:49.357+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : "", "value" : "No value present" } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlhZjljYTYtZjA1Ni00YzVhLWI2NjUtOWIyZGI1MjdmN2Iz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:48 GMT]}] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : StatusCode [200] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Time [1079] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1] : Size [190] 2019-03-20 10:44:49 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlhZjljYTYtZjA1Ni00YzVhLWI2NjUtOWIyZGI1MjdmN2Iz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:48 GMT]}] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlhZjljYTYtZjA1Ni00YzVhLWI2NjUtOWIyZGI1MjdmN2Iz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:48 GMT]}] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlhZjljYTYtZjA1Ni00YzVhLWI2NjUtOWIyZGI1MjdmN2Iz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:48 GMT]}] 2019-03-20 10:44:49 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzlhZjljYTYtZjA1Ni00YzVhLWI2NjUtOWIyZGI1MjdmN2Iz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:48 GMT]}] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "844394877", "branch" : "KPHqGXek", "bugsOpen" : "844394877", "createdBy" : "", "createdDate" : "", "description" : "KPHqGXek", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "KPHqGXek", "issueTracker" : "", "lastCommit" : "KPHqGXek", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "KPHqGXek", "openAPISpec" : "KPHqGXek", "openText" : "KPHqGXek", "org" : "", "props" : null, "url" : "KPHqGXek", "version" : "" }] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:50.352+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NWIwMzI1YzctMzk5Mi00YTkyLTkyYTAtMjFjMGFmNDRkZTky; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:49 GMT]}] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : StatusCode [400] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Time [983] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1] : Size [744] 2019-03-20 10:44:50 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NWIwMzI1YzctMzk5Mi00YTkyLTkyYTAtMjFjMGFmNDRkZTky; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:49 GMT]}] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NWIwMzI1YzctMzk5Mi00YTkyLTkyYTAtMjFjMGFmNDRkZTky; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:49 GMT]}] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NWIwMzI1YzctMzk5Mi00YTkyLTkyYTAtMjFjMGFmNDRkZTky; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:49 GMT]}] 2019-03-20 10:44:50 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NWIwMzI1YzctMzk5Mi00YTkyLTkyYTAtMjFjMGFmNDRkZTky; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:49 GMT]}] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Method [POST] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "KNTBLanK", "organization" : { "billingEmail" : "michel.ziemann@yahoo.com", "company" : "Dooley, Dooley and Dooley", "createdBy" : "", "createdDate" : "", "description" : "KNTBLanK", "id" : "", "inactive" : false, "location" : "KNTBLanK", "modifiedBy" : "", "modifiedDate" : "", "name" : "KNTBLanK", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "KNTBLanK", "version" : "" }] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response [{ "timestamp" : "2019-03-20T10:44:51.477+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MTk5NmU3N2QtZWJmYS00MTJjLWEyMjItYzQ5MDNlMTczMDdh; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:50 GMT]}] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : StatusCode [400] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Time [871] 2019-03-20 10:44:51 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Size [750] 2019-03-20 10:44:51 ERROR [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [400 == 401 OR 400 == 403] result [Failed] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : URL [http://13.56.210.25/api/v1/user-variable/] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Method [DELETE] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request [null] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response [{ "timestamp" : "2019-03-20T10:44:52.468+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/user-variable/" }] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response-Headers [{Allow=[POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmI3MzFiZGMtYmJlZC00OGFmLWJlODEtZjczMjEzMGNjM2Ew; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:51 GMT]}] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : StatusCode [405] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Time [991] 2019-03-20 10:44:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Size [168] 2019-03-20 10:44:52 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : URL [http://13.56.210.25/api/v1/envs/] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Method [DELETE] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request [null] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response [{ "timestamp" : "2019-03-20T10:44:53.535+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/envs/" }] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response-Headers [{Allow=[PUT, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDE1NDgyYjItNGM5Yy00YTRkLWFiZDctNWMyYWRmNWY5MDBl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:52 GMT]}] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : StatusCode [405] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Time [1062] 2019-03-20 10:44:53 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Size [159] 2019-03-20 10:44:53 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : URL [http://13.56.210.25/api/v1/projects/] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Method [DELETE] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request [null] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response [{ "timestamp" : "2019-03-20T10:44:54.912+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/projects/" }] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDNjODhlMmEtYjAzZC00NzQ5LTlmZTQtMGIzOTk5OWU1YmQ1; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:54 GMT]}] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : StatusCode [405] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Time [1373] 2019-03-20 10:44:54 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Size [163] 2019-03-20 10:44:54 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot/] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Method [DELETE] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request [null] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response [{ "timestamp" : "2019-03-20T10:44:56.260+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/issue-trackers/issue-tracker-bot/" }] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response-Headers [{Allow=[POST, GET, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZmY4ZDc3OWItNzY4YS00YzE2LTgyMzktNDMyOTRkZjkxZmM4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:55 GMT]}] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : StatusCode [405] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Time [1346] 2019-03-20 10:44:56 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Size [187] 2019-03-20 10:44:56 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : URL [http://13.56.210.25/api/v1/skills/] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Method [DELETE] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request [null] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response [{ "timestamp" : "2019-03-20T10:44:57.656+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/skills/" }] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZDRkMDFmMjItZjY4NC00MTAyLThhN2ItZmUxOWU2Y2NmYTRl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:56 GMT]}] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : StatusCode [405] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Time [1394] 2019-03-20 10:44:57 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Size [161] 2019-03-20 10:44:57 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : URL [http://13.56.210.25/api/v1/accounts/] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Method [DELETE] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request [null] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response [{ "timestamp" : "2019-03-20T10:44:58.517+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/accounts/" }] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGJjZGJlZmItODFkNi00MzM5LWI2YWUtNWVhNGQ2OGYzODcw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:57 GMT]}] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : StatusCode [405] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Time [860] 2019-03-20 10:44:58 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Size [163] 2019-03-20 10:44:58 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : URL [http://13.56.210.25/api/v1/orgs/] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Method [DELETE] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request [null] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response [{ "timestamp" : "2019-03-20T10:44:59.644+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/orgs/" }] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YmFlYTBlMTgtYjk2My00NDgyLWI3MmYtYmNiMWNkZjUwNjY3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:44:58 GMT]}] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : StatusCode [405] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Time [1125] 2019-03-20 10:44:59 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Size [159] 2019-03-20 10:44:59 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed]

--- FX Bot ---

asriz7777 commented 5 years ago

Project : FXABAC TEST

Template : ApiV1UserVariablePostUservariableuserbDisallowHijack1

Run Id : 8a808011699a990101699ab3901a2277

Job : Default

Env : Default

Category : Hijack_Level1

Tags : [FX Top 10 - API Vulnerability, Data_Access_Control]

Severity : Major

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 400

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNmJhMDktOWRmZC00MjA5LTk2ZDUtYzQxNmE5MGU3YTQ4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:50 GMT]}

Endpoint : http://13.56.210.25/api/v1/user-variable

Request :
{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "gRAthv1A", "organization" : { "billingEmail" : "timmothy.champlin@hotmail.com", "company" : "Wuckert-Wuckert", "createdBy" : "", "createdDate" : "", "description" : "gRAthv1A", "id" : "", "inactive" : false, "location" : "gRAthv1A", "modifiedBy" : "", "modifiedDate" : "", "name" : "gRAthv1A", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "gRAthv1A", "version" : "" }

Response :
{ "timestamp" : "2019-03-20T10:45:50.770+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }

Logs :
2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/orgs] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Request [{ "billingEmail" : "mtqlyaBh", "company" : "Hoppe Inc", "createdBy" : "", "createdDate" : "", "description" : "mtqlyaBh", "id" : "", "inactive" : false, "location" : "mtqlyaBh", "modifiedBy" : "", "modifiedDate" : "", "name" : "mtqlyaBh", "orgPlan" : "TEAM", "orgType" : "ENTERPRISE", "version" : "" }] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:37.081+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs" }] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTk3NGEzYWItYTEwMS00MzRmLTk3MTMtNDg1MzBhYmI4NjU4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:36 GMT]}] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : StatusCode [403] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Time [1361] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1] : Size [121] 2019-03-20 10:45:37 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [403 == 200 OR 403 == 201] result [Failed] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTk3NGEzYWItYTEwMS00MzRmLTk3MTMtNDg1MzBhYmI4NjU4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:36 GMT]}] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTk3NGEzYWItYTEwMS00MzRmLTk3MTMtNDg1MzBhYmI4NjU4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:36 GMT]}] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTk3NGEzYWItYTEwMS00MzRmLTk3MTMtNDg1MzBhYmI4NjU4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:36 GMT]}] 2019-03-20 10:45:37 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTk3NGEzYWItYTEwMS00MzRmLTk3MTMtNDg1MzBhYmI4NjU4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:36 GMT]}] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/accounts] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Request [{ "accessKey" : "kNJGOdxM", "accountType" : "GitLab", "createdBy" : "", "createdDate" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "kNJGOdxM", "org" : "", "prop1" : "kNJGOdxM", "prop2" : "kNJGOdxM", "prop3" : "kNJGOdxM", "region" : "kNJGOdxM", "secretKey" : "kNJGOdxM", "version" : "" }] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:38.471+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 11, column: 11] (through reference chain: com.fxlabs.fxt.dto.clusters.Account[\"org\"])", "path" : "/api/v1/accounts" }] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGM0YjE1ZGUtZTUzOC00NDc2LWIxYjQtMTNjMmQ0ZTJhMmU3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:37 GMT]}] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Time [1387] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1] : Size [722] 2019-03-20 10:45:38 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGM0YjE1ZGUtZTUzOC00NDc2LWIxYjQtMTNjMmQ0ZTJhMmU3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:37 GMT]}] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGM0YjE1ZGUtZTUzOC00NDc2LWIxYjQtMTNjMmQ0ZTJhMmU3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:37 GMT]}] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGM0YjE1ZGUtZTUzOC00NDc2LWIxYjQtMTNjMmQ0ZTJhMmU3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:37 GMT]}] 2019-03-20 10:45:38 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MGM0YjE1ZGUtZTUzOC00NDc2LWIxYjQtMTNjMmQ0ZTJhMmU3; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:37 GMT]}] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/skills] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Request [{ "accessKey" : "EJOl5weQ", "createdBy" : "", "createdDate" : "", "description" : "EJOl5weQ", "host" : "EJOl5weQ", "id" : "", "inactive" : false, "key" : "EJOl5weQ", "modifiedBy" : "", "modifiedDate" : "", "name" : "EJOl5weQ", "org" : "", "prop1" : "EJOl5weQ", "prop2" : "EJOl5weQ", "prop3" : "EJOl5weQ", "prop4" : "EJOl5weQ", "prop5" : "EJOl5weQ", "secretKey" : "EJOl5weQ", "skillType" : "BOT_DEPLOYMENT", "version" : "" }] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:39.616+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 13, column: 11] (through reference chain: com.fxlabs.fxt.dto.skills.Skill[\"org\"])", "path" : "/api/v1/skills" }] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDNlMjY5ZjQtZmMxMi00ODI3LTk1N2MtMGQ5NTM0NGMzMWE2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:39 GMT]}] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Time [1145] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1] : Size [716] 2019-03-20 10:45:39 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDNlMjY5ZjQtZmMxMi00ODI3LTk1N2MtMGQ5NTM0NGMzMWE2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:39 GMT]}] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDNlMjY5ZjQtZmMxMi00ODI3LTk1N2MtMGQ5NTM0NGMzMWE2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:39 GMT]}] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDNlMjY5ZjQtZmMxMi00ODI3LTk1N2MtMGQ5NTM0NGMzMWE2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:39 GMT]}] 2019-03-20 10:45:39 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDNlMjY5ZjQtZmMxMi00ODI3LTk1N2MtMGQ5NTM0NGMzMWE2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:39 GMT]}] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request [{ "account" : "", "createdBy" : "", "createdDate" : "", "description" : "5BS5m1ze", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "5BS5m1ze", "org" : "", "prop1" : "5BS5m1ze", "prop2" : "5BS5m1ze", "prop3" : "5BS5m1ze", "prop4" : "5BS5m1ze", "prop5" : "5BS5m1ze", "skill" : "", "state" : "INACTIVE", "version" : "", "visibility" : "ORG_PUBLIC" }] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:41.015+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.it.IssueTracker[\"account\"])", "path" : "/api/v1/issue-trackers/issue-tracker-bot" }] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZmRhOWYxMzAtM2E1ZS00M2NjLWE0YjItZDdlNmU5OGNhMjM4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:40 GMT]}] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Time [1402] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1] : Size [768] 2019-03-20 10:45:41 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZmRhOWYxMzAtM2E1ZS00M2NjLWE0YjItZDdlNmU5OGNhMjM4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:40 GMT]}] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZmRhOWYxMzAtM2E1ZS00M2NjLWE0YjItZDdlNmU5OGNhMjM4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:40 GMT]}] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZmRhOWYxMzAtM2E1ZS00M2NjLWE0YjItZDdlNmU5OGNhMjM4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:40 GMT]}] 2019-03-20 10:45:41 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZmRhOWYxMzAtM2E1ZS00M2NjLWE0YjItZDdlNmU5OGNhMjM4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:40 GMT]}] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "908115104", "branch" : "FEcVpf4B", "bugsOpen" : "908115104", "createdBy" : "", "createdDate" : "", "description" : "FEcVpf4B", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "FEcVpf4B", "issueTracker" : "", "lastCommit" : "FEcVpf4B", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "FEcVpf4B", "openAPISpec" : "FEcVpf4B", "openText" : "FEcVpf4B", "org" : "", "props" : null, "url" : "FEcVpf4B", "version" : "" }] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:42.512+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NGU4YTg1MWEtOThjYS00MGQyLTk5MTMtZGQyMjY4ZDdhY2Mz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:41 GMT]}] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Time [1489] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1] : Size [744] 2019-03-20 10:45:42 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NGU4YTg1MWEtOThjYS00MGQyLTk5MTMtZGQyMjY4ZDdhY2Mz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:41 GMT]}] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NGU4YTg1MWEtOThjYS00MGQyLTk5MTMtZGQyMjY4ZDdhY2Mz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:41 GMT]}] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NGU4YTg1MWEtOThjYS00MGQyLTk5MTMtZGQyMjY4ZDdhY2Mz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:41 GMT]}] 2019-03-20 10:45:42 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NGU4YTg1MWEtOThjYS00MGQyLTk5MTMtZGQyMjY4ZDdhY2Mz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:41 GMT]}] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Request [{ "baseUrl" : "XRfFHkji", "createdBy" : "", "createdDate" : "", "description" : "XRfFHkji", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "XRfFHkji", "projectId" : "", "refId" : "XRfFHkji", "version" : "" }] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:45:43.925+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : null, "value" : "Invalid project." } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM5N2RmYjMtZTc0MC00MDAzLWIyNTEtNDhiY2U3YzY4ZjVl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:43 GMT]}] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : StatusCode [200] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Time [1415] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1] : Size [192] 2019-03-20 10:45:43 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM5N2RmYjMtZTc0MC00MDAzLWIyNTEtNDhiY2U3YzY4ZjVl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:43 GMT]}] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM5N2RmYjMtZTc0MC00MDAzLWIyNTEtNDhiY2U3YzY4ZjVl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:43 GMT]}] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM5N2RmYjMtZTc0MC00MDAzLWIyNTEtNDhiY2U3YzY4ZjVl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:43 GMT]}] 2019-03-20 10:45:43 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM5N2RmYjMtZTc0MC00MDAzLWIyNTEtNDhiY2U3YzY4ZjVl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:43 GMT]}] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "8CJVr2bG", "organization" : { "billingEmail" : "amiya.corwin@gmail.com", "company" : "Reichel, Reichel and Reichel", "createdBy" : "", "createdDate" : "", "description" : "8CJVr2bG", "id" : "", "inactive" : false, "location" : "8CJVr2bG", "modifiedBy" : "", "modifiedDate" : "", "name" : "8CJVr2bG", "orgPlan" : "ENTERPRISE", "orgType" : "PERSONAL", "version" : "" }, "project" : "", "scope" : "Environment", "value" : "8CJVr2bG", "version" : "" }] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:45.684+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=Mjg1OWU1MmMtM2IxNS00ZDBhLTkwMzktMzAxMjhhMDI4ZDll; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:45 GMT]}] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Time [1641] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1] : Size [750] 2019-03-20 10:45:45 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=Mjg1OWU1MmMtM2IxNS00ZDBhLTkwMzktMzAxMjhhMDI4ZDll; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:45 GMT]}] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=Mjg1OWU1MmMtM2IxNS00ZDBhLTkwMzktMzAxMjhhMDI4ZDll; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:45 GMT]}] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=Mjg1OWU1MmMtM2IxNS00ZDBhLTkwMzktMzAxMjhhMDI4ZDll; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:45 GMT]}] 2019-03-20 10:45:45 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=Mjg1OWU1MmMtM2IxNS00ZDBhLTkwMzktMzAxMjhhMDI4ZDll; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:45 GMT]}] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Request [{ "baseUrl" : "lKpQwpVh", "createdBy" : "", "createdDate" : "", "description" : "lKpQwpVh", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "lKpQwpVh", "projectId" : "lKpQwpVh", "refId" : "lKpQwpVh", "version" : "" }] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:45:47.456+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : "", "value" : "No value present" } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWUxMGY1OGYtNzA5Yi00ZjRjLWEyOTYtMzUzY2Q3ZWMwZDdm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:46 GMT]}] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : StatusCode [200] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Time [1779] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1] : Size [190] 2019-03-20 10:45:47 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWUxMGY1OGYtNzA5Yi00ZjRjLWEyOTYtMzUzY2Q3ZWMwZDdm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:46 GMT]}] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWUxMGY1OGYtNzA5Yi00ZjRjLWEyOTYtMzUzY2Q3ZWMwZDdm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:46 GMT]}] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWUxMGY1OGYtNzA5Yi00ZjRjLWEyOTYtMzUzY2Q3ZWMwZDdm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:46 GMT]}] 2019-03-20 10:45:47 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWUxMGY1OGYtNzA5Yi00ZjRjLWEyOTYtMzUzY2Q3ZWMwZDdm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:46 GMT]}] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "2117298958", "branch" : "zxRtT0Ni", "bugsOpen" : "2117298958", "createdBy" : "", "createdDate" : "", "description" : "zxRtT0Ni", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "zxRtT0Ni", "issueTracker" : "", "lastCommit" : "zxRtT0Ni", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "zxRtT0Ni", "openAPISpec" : "zxRtT0Ni", "openText" : "zxRtT0Ni", "org" : "", "props" : null, "url" : "zxRtT0Ni", "version" : "" }] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:48.943+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmVlY2FkYzEtZGRjOC00ZTg3LWI5Y2QtOWI3NjgxM2VkMjNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:48 GMT]}] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : StatusCode [400] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Time [1478] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1] : Size [744] 2019-03-20 10:45:48 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmVlY2FkYzEtZGRjOC00ZTg3LWI5Y2QtOWI3NjgxM2VkMjNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:48 GMT]}] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmVlY2FkYzEtZGRjOC00ZTg3LWI5Y2QtOWI3NjgxM2VkMjNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:48 GMT]}] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmVlY2FkYzEtZGRjOC00ZTg3LWI5Y2QtOWI3NjgxM2VkMjNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:48 GMT]}] 2019-03-20 10:45:48 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmVlY2FkYzEtZGRjOC00ZTg3LWI5Y2QtOWI3NjgxM2VkMjNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:48 GMT]}] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Method [POST] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "gRAthv1A", "organization" : { "billingEmail" : "timmothy.champlin@hotmail.com", "company" : "Wuckert-Wuckert", "createdBy" : "", "createdDate" : "", "description" : "gRAthv1A", "id" : "", "inactive" : false, "location" : "gRAthv1A", "modifiedBy" : "", "modifiedDate" : "", "name" : "gRAthv1A", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "gRAthv1A", "version" : "" }] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response [{ "timestamp" : "2019-03-20T10:45:50.770+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjllNmJhMDktOWRmZC00MjA5LTk2ZDUtYzQxNmE5MGU3YTQ4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:50 GMT]}] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : StatusCode [400] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Time [1694] 2019-03-20 10:45:50 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Size [750] 2019-03-20 10:45:50 ERROR [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [400 == 401 OR 400 == 403] result [Failed] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : URL [http://13.56.210.25/api/v1/user-variable/] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Method [DELETE] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request [null] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response [{ "timestamp" : "2019-03-20T10:45:52.524+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/user-variable/" }] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response-Headers [{Allow=[POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZDk4YWM0ODYtNDAwMi00OWNhLThlZmUtY2Y3ZGY1MTRmZjYx; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:51 GMT]}] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : StatusCode [405] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Time [1753] 2019-03-20 10:45:52 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Size [168] 2019-03-20 10:45:52 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : URL [http://13.56.210.25/api/v1/envs/] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Method [DELETE] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request [null] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response [{ "timestamp" : "2019-03-20T10:45:54.222+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/envs/" }] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response-Headers [{Allow=[PUT, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGU4ZjUzMTEtZTM4Yi00NDYxLTg0ZDYtNGE5Yzc0YmQyOGMy; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:53 GMT]}] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : StatusCode [405] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Time [1696] 2019-03-20 10:45:54 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Size [159] 2019-03-20 10:45:54 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : URL [http://13.56.210.25/api/v1/projects/] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Method [DELETE] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request [null] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response [{ "timestamp" : "2019-03-20T10:45:55.756+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/projects/" }] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OWU4YjczMDctZmRjYi00NzhjLTlmZDEtM2VlZDBiYTBhODBk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:54 GMT]}] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : StatusCode [405] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Time [1532] 2019-03-20 10:45:55 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Size [163] 2019-03-20 10:45:55 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot/] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Method [DELETE] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request [null] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response [{ "timestamp" : "2019-03-20T10:45:57.413+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/issue-trackers/issue-tracker-bot/" }] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response-Headers [{Allow=[POST, GET, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MmE0ZTFmZWQtNDdjYy00ZDlkLWEwYmYtZGM2MTI5MjA4MzJi; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:56 GMT]}] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : StatusCode [405] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Time [1657] 2019-03-20 10:45:57 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Size [187] 2019-03-20 10:45:57 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : URL [http://13.56.210.25/api/v1/skills/] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Method [DELETE] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request [null] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response [{ "timestamp" : "2019-03-20T10:45:58.933+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/skills/" }] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YzAyOTIwZGEtNGQzZi00ZGU3LWI2ZDEtODMxMzgxZjE4Yjhm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:58 GMT]}] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : StatusCode [405] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Time [1518] 2019-03-20 10:45:58 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Size [161] 2019-03-20 10:45:58 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : URL [http://13.56.210.25/api/v1/accounts/] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Method [DELETE] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request [null] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response [{ "timestamp" : "2019-03-20T10:46:00.562+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/accounts/" }] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NDE5YjNiZTktNDk0NC00OWRlLWI0OTUtYjRmNmJkNGI5MGFl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:45:59 GMT]}] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : StatusCode [405] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Time [1628] 2019-03-20 10:46:00 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Size [163] 2019-03-20 10:46:00 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : URL [http://13.56.210.25/api/v1/orgs/] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Method [DELETE] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request [null] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response [{ "timestamp" : "2019-03-20T10:46:02.084+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/orgs/" }] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjBlOGMxYmYtY2UzNS00NGY3LWI1Y2QtMGVhNDlkOWVkNGQw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:01 GMT]}] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : StatusCode [405] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Time [1521] 2019-03-20 10:46:02 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Size [159] 2019-03-20 10:46:02 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed]

--- FX Bot ---

asriz7777 commented 5 years ago

Project : FXABAC TEST

Template : ApiV1UserVariablePostUservariableuserbDisallowHijack1

Run Id : 8a808011699a990101699ab3901a2277

Job : Default

Env : Default

Category : Hijack_Level1

Tags : [FX Top 10 - API Vulnerability, Data_Access_Control]

Severity : Major

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 400

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODhjNDMyYjktZDhjMy00YjNjLWE3M2ItYzhlYzlmZWRhYzZl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:45 GMT]}

Endpoint : http://13.56.210.25/api/v1/user-variable

Request :
{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "Rgts9yxm", "organization" : { "billingEmail" : "britney.conn@gmail.com", "company" : "Schaden, Schaden and Schaden", "createdBy" : "", "createdDate" : "", "description" : "Rgts9yxm", "id" : "", "inactive" : false, "location" : "Rgts9yxm", "modifiedBy" : "", "modifiedDate" : "", "name" : "Rgts9yxm", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "Rgts9yxm", "version" : "" }

Response :
{ "timestamp" : "2019-03-20T10:46:46.729+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }

Logs :
2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/orgs] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Request [{ "billingEmail" : "HWOID0n5", "company" : "Grady Group", "createdBy" : "", "createdDate" : "", "description" : "HWOID0n5", "id" : "", "inactive" : false, "location" : "HWOID0n5", "modifiedBy" : "", "modifiedDate" : "", "name" : "HWOID0n5", "orgPlan" : "TEAM", "orgType" : "ENTERPRISE", "version" : "" }] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:31.306+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs" }] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWQ5MTlkY2EtOTU3Ny00NWYyLTg2ZTUtNDE3YmI2ZmVhZDE0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:30 GMT]}] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : StatusCode [403] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Time [1743] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1] : Size [121] 2019-03-20 10:46:31 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [403 == 200 OR 403 == 201] result [Failed] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWQ5MTlkY2EtOTU3Ny00NWYyLTg2ZTUtNDE3YmI2ZmVhZDE0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:30 GMT]}] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWQ5MTlkY2EtOTU3Ny00NWYyLTg2ZTUtNDE3YmI2ZmVhZDE0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:30 GMT]}] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWQ5MTlkY2EtOTU3Ny00NWYyLTg2ZTUtNDE3YmI2ZmVhZDE0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:30 GMT]}] 2019-03-20 10:46:31 DEBUG [OrgCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZWQ5MTlkY2EtOTU3Ny00NWYyLTg2ZTUtNDE3YmI2ZmVhZDE0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:30 GMT]}] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/accounts] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Request [{ "accessKey" : "bxM49hXU", "accountType" : "GitLab", "createdBy" : "", "createdDate" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "bxM49hXU", "org" : "", "prop1" : "bxM49hXU", "prop2" : "bxM49hXU", "prop3" : "bxM49hXU", "region" : "bxM49hXU", "secretKey" : "bxM49hXU", "version" : "" }] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:32.906+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 11, column: 11] (through reference chain: com.fxlabs.fxt.dto.clusters.Account[\"org\"])", "path" : "/api/v1/accounts" }] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzA1YWM4NzMtZTc4MS00NmFkLWIzNzktYzY2NWZkZTdmYTQw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:32 GMT]}] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Time [1598] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1] : Size [722] 2019-03-20 10:46:32 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzA1YWM4NzMtZTc4MS00NmFkLWIzNzktYzY2NWZkZTdmYTQw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:32 GMT]}] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzA1YWM4NzMtZTc4MS00NmFkLWIzNzktYzY2NWZkZTdmYTQw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:32 GMT]}] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzA1YWM4NzMtZTc4MS00NmFkLWIzNzktYzY2NWZkZTdmYTQw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:32 GMT]}] 2019-03-20 10:46:32 DEBUG [AccountCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NzA1YWM4NzMtZTc4MS00NmFkLWIzNzktYzY2NWZkZTdmYTQw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:32 GMT]}] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/skills] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Request [{ "accessKey" : "TZzxyFc8", "createdBy" : "", "createdDate" : "", "description" : "TZzxyFc8", "host" : "TZzxyFc8", "id" : "", "inactive" : false, "key" : "TZzxyFc8", "modifiedBy" : "", "modifiedDate" : "", "name" : "TZzxyFc8", "org" : "", "prop1" : "TZzxyFc8", "prop2" : "TZzxyFc8", "prop3" : "TZzxyFc8", "prop4" : "TZzxyFc8", "prop5" : "TZzxyFc8", "secretKey" : "TZzxyFc8", "skillType" : "BOT_DEPLOYMENT", "version" : "" }] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:34.308+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.NameDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 13, column: 11] (through reference chain: com.fxlabs.fxt.dto.skills.Skill[\"org\"])", "path" : "/api/v1/skills" }] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGRhMGFmODktYWZlZS00NzY0LTkwNDYtNzNhZWY4YzA0YTBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:33 GMT]}] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Time [1401] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1] : Size [716] 2019-03-20 10:46:34 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGRhMGFmODktYWZlZS00NzY0LTkwNDYtNzNhZWY4YzA0YTBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:33 GMT]}] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGRhMGFmODktYWZlZS00NzY0LTkwNDYtNzNhZWY4YzA0YTBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:33 GMT]}] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGRhMGFmODktYWZlZS00NzY0LTkwNDYtNzNhZWY4YzA0YTBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:33 GMT]}] 2019-03-20 10:46:34 DEBUG [SkillCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGRhMGFmODktYWZlZS00NzY0LTkwNDYtNzNhZWY4YzA0YTBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:33 GMT]}] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request [{ "account" : "", "createdBy" : "", "createdDate" : "", "description" : "jkL1iAj7", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "jkL1iAj7", "org" : "", "prop1" : "jkL1iAj7", "prop2" : "jkL1iAj7", "prop3" : "jkL1iAj7", "prop4" : "jkL1iAj7", "prop5" : "jkL1iAj7", "skill" : "", "state" : "INACTIVE", "version" : "", "visibility" : "ORG_PUBLIC" }] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:35.196+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.it.IssueTracker[\"account\"])", "path" : "/api/v1/issue-trackers/issue-tracker-bot" }] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MWM0NDhkYTEtMzllNi00NDM1LTg3NDItOTg4YWE1OTcxMTg2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:34 GMT]}] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Time [885] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1] : Size [768] 2019-03-20 10:46:35 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MWM0NDhkYTEtMzllNi00NDM1LTg3NDItOTg4YWE1OTcxMTg2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:34 GMT]}] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MWM0NDhkYTEtMzllNi00NDM1LTg3NDItOTg4YWE1OTcxMTg2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:34 GMT]}] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MWM0NDhkYTEtMzllNi00NDM1LTg3NDItOTg4YWE1OTcxMTg2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:34 GMT]}] 2019-03-20 10:46:35 DEBUG [IssueTrackerCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MWM0NDhkYTEtMzllNi00NDM1LTg3NDItOTg4YWE1OTcxMTg2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:34 GMT]}] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "1454316113", "branch" : "nSKeNGjC", "bugsOpen" : "1454316113", "createdBy" : "", "createdDate" : "", "description" : "nSKeNGjC", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "nSKeNGjC", "issueTracker" : "", "lastCommit" : "nSKeNGjC", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "nSKeNGjC", "openAPISpec" : "nSKeNGjC", "openText" : "nSKeNGjC", "org" : "", "props" : null, "url" : "nSKeNGjC", "version" : "" }] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:36.722+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTMzNmViMGUtZmNhOC00YzZiLTk5ZTMtMGRiYjllZjU4ZGNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:35 GMT]}] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Time [1523] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1] : Size [744] 2019-03-20 10:46:36 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTMzNmViMGUtZmNhOC00YzZiLTk5ZTMtMGRiYjllZjU4ZGNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:35 GMT]}] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTMzNmViMGUtZmNhOC00YzZiLTk5ZTMtMGRiYjllZjU4ZGNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:35 GMT]}] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTMzNmViMGUtZmNhOC00YzZiLTk5ZTMtMGRiYjllZjU4ZGNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:35 GMT]}] 2019-03-20 10:46:36 DEBUG [ProjectCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YTMzNmViMGUtZmNhOC00YzZiLTk5ZTMtMGRiYjllZjU4ZGNl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:35 GMT]}] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Request [{ "baseUrl" : "wjwTXSv6", "createdBy" : "", "createdDate" : "", "description" : "wjwTXSv6", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "wjwTXSv6", "projectId" : "", "refId" : "wjwTXSv6", "version" : "" }] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:46:38.633+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : null, "value" : "Invalid project." } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZGMxODNjYjUtYjdkNi00YmZlLWFiZGQtMmFhNzFiNTdlZjNk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:37 GMT]}] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : StatusCode [200] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Time [1912] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1] : Size [192] 2019-03-20 10:46:38 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZGMxODNjYjUtYjdkNi00YmZlLWFiZGQtMmFhNzFiNTdlZjNk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:37 GMT]}] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZGMxODNjYjUtYjdkNi00YmZlLWFiZGQtMmFhNzFiNTdlZjNk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:37 GMT]}] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZGMxODNjYjUtYjdkNi00YmZlLWFiZGQtMmFhNzFiNTdlZjNk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:37 GMT]}] 2019-03-20 10:46:38 DEBUG [EnvironmentCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZGMxODNjYjUtYjdkNi00YmZlLWFiZGQtMmFhNzFiNTdlZjNk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:37 GMT]}] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Method [POST] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "gO2WxahH", "organization" : { "billingEmail" : "saul.waelchi@hotmail.com", "company" : "Braun Group", "createdBy" : "", "createdDate" : "", "description" : "gO2WxahH", "id" : "", "inactive" : false, "location" : "gO2WxahH", "modifiedBy" : "", "modifiedDate" : "", "name" : "gO2WxahH", "orgPlan" : "ENTERPRISE", "orgType" : "PERSONAL", "version" : "" }, "project" : "", "scope" : "Environment", "value" : "gO2WxahH", "version" : "" }] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:40.412+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODViOTcyZTUtNTg1OC00MTJmLTkyYjEtMTNiYTIwMThhMWI0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:39 GMT]}] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : StatusCode [400] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Time [1671] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1] : Size [750] 2019-03-20 10:46:40 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODViOTcyZTUtNTg1OC00MTJmLTkyYjEtMTNiYTIwMThhMWI0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:39 GMT]}] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODViOTcyZTUtNTg1OC00MTJmLTkyYjEtMTNiYTIwMThhMWI0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:39 GMT]}] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODViOTcyZTUtNTg1OC00MTJmLTkyYjEtMTNiYTIwMThhMWI0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:39 GMT]}] 2019-03-20 10:46:40 DEBUG [UserVariableCreateUserBInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODViOTcyZTUtNTg1OC00MTJmLTkyYjEtMTNiYTIwMThhMWI0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:39 GMT]}] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/envs] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Request [{ "baseUrl" : "ycHVLNxT", "createdBy" : "", "createdDate" : "", "description" : "ycHVLNxT", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "ycHVLNxT", "projectId" : "ycHVLNxT", "refId" : "ycHVLNxT", "version" : "" }] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Response [{ "requestId" : "None", "requestTime" : "2019-03-20T10:46:42.418+0000", "errors" : true, "messages" : [ { "type" : "ERROR", "key" : "", "value" : "No value present" } ], "data" : null, "totalPages" : 0, "totalElements" : 0 }] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjcxYjFjOWYtYjMzMC00YTYxLWFjMDktZmQ4NmIxYTBkM2Qw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:41 GMT]}] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : StatusCode [200] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Time [2018] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1] : Size [190] 2019-03-20 10:46:42 INFO [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [200 == 200 OR 200 == 201] result [Passed] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjcxYjFjOWYtYjMzMC00YTYxLWFjMDktZmQ4NmIxYTBkM2Qw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:41 GMT]}] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjcxYjFjOWYtYjMzMC00YTYxLWFjMDktZmQ4NmIxYTBkM2Qw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:41 GMT]}] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjcxYjFjOWYtYjMzMC00YTYxLWFjMDktZmQ4NmIxYTBkM2Qw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:41 GMT]}] 2019-03-20 10:46:42 DEBUG [EnvironmentCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NjcxYjFjOWYtYjMzMC00YTYxLWFjMDktZmQ4NmIxYTBkM2Qw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:41 GMT]}] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : URL [http://13.56.210.25/api/v1/projects] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Method [POST] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Request [{ "account" : "", "autoGenSuites" : "1433105386", "branch" : "EIrkrJjQ", "bugsOpen" : "1433105386", "createdBy" : "", "createdDate" : "", "description" : "EIrkrJjQ", "genPolicy" : "Create", "id" : "", "inactive" : false, "isFileLoad" : "EIrkrJjQ", "issueTracker" : "", "lastCommit" : "EIrkrJjQ", "lastSync" : null, "modifiedBy" : "", "modifiedDate" : "", "name" : "EIrkrJjQ", "openAPISpec" : "EIrkrJjQ", "openText" : "EIrkrJjQ", "org" : "", "props" : null, "url" : "EIrkrJjQ", "version" : "" }] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:44.175+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.base.AccountMinimalDto (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 2, column: 15] (through reference chain: com.fxlabs.fxt.dto.project.Project[\"account\"])", "path" : "/api/v1/projects" }] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGNmOWNlMzctNzViZC00OWRlLWFhMmQtM2M4ZDQ1MWRlNTY0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:43 GMT]}] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : StatusCode [400] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Time [1742] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1] : Size [744] 2019-03-20 10:46:44 ERROR [null] : Assertion [@StatusCode == 200 OR @StatusCode == 201] resolved-to [400 == 200 OR 400 == 201] result [Failed] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGNmOWNlMzctNzViZC00OWRlLWFhMmQtM2M4ZDQ1MWRlNTY0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:43 GMT]}] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGNmOWNlMzctNzViZC00OWRlLWFhMmQtM2M4ZDQ1MWRlNTY0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:43 GMT]}] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGNmOWNlMzctNzViZC00OWRlLWFhMmQtM2M4ZDQ1MWRlNTY0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:43 GMT]}] 2019-03-20 10:46:44 DEBUG [ProjectCreateUserAInitHijack1_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=OGNmOWNlMzctNzViZC00OWRlLWFhMmQtM2M4ZDQ1MWRlNTY0; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:43 GMT]}] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : URL [http://13.56.210.25/api/v1/user-variable] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Method [POST] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request [{ "createdBy" : "", "createdDate" : "", "environment" : "", "id" : "", "inactive" : false, "modifiedBy" : "", "modifiedDate" : "", "name" : "Rgts9yxm", "organization" : { "billingEmail" : "britney.conn@gmail.com", "company" : "Schaden, Schaden and Schaden", "createdBy" : "", "createdDate" : "", "description" : "Rgts9yxm", "id" : "", "inactive" : false, "location" : "Rgts9yxm", "modifiedBy" : "", "modifiedDate" : "", "name" : "Rgts9yxm", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }, "project" : "", "scope" : "Project", "value" : "Rgts9yxm", "version" : "" }] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response [{ "timestamp" : "2019-03-20T10:46:46.729+0000", "status" : 400, "error" : "Bad Request", "message" : "JSON parse error: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value (''); nested exception is com.fasterxml.jackson.databind.exc.MismatchedInputException: Cannot construct instance of com.fxlabs.fxt.dto.project.Environment (although at least one Creator exists): no String-argument constructor/factory method to deserialize from String value ('')\n at [Source: (PushbackInputStream); line: 4, column: 19] (through reference chain: com.fxlabs.fxt.dto.users.UserVariable[\"environment\"])", "path" : "/api/v1/user-variable" }] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ODhjNDMyYjktZDhjMy00YjNjLWE3M2ItYzhlYzlmZWRhYzZl; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:45 GMT]}] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : StatusCode [400] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Time [2430] 2019-03-20 10:46:46 DEBUG [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Size [750] 2019-03-20 10:46:46 ERROR [ApiV1UserVariablePostUservariableuserbDisallowHijack1] : Assertion [@StatusCode == 401 OR @StatusCode == 403] resolved-to [400 == 401 OR 400 == 403] result [Failed] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : URL [http://13.56.210.25/api/v1/user-variable/] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Method [DELETE] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request [null] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response [{ "timestamp" : "2019-03-20T10:46:48.213+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/user-variable/" }] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Response-Headers [{Allow=[POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZjE3NWQ1NTctNDVlZC00OWYyLTk4NmEtNTU4MGZlNTY1NTdj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:48 GMT]}] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : StatusCode [405] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Time [1483] 2019-03-20 10:46:48 DEBUG [ApiV1UserVariableIdDeleteUservariablehijack1] : Size [168] 2019-03-20 10:46:48 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : URL [http://13.56.210.25/api/v1/envs/] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Method [DELETE] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request [null] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response [{ "timestamp" : "2019-03-20T10:46:49.678+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/envs/" }] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Response-Headers [{Allow=[PUT, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MzhiZTkyNGItYzBjYi00NzczLWI0YzgtMWIwYjdmOGM0M2Q4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:49 GMT]}] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : StatusCode [405] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Time [1464] 2019-03-20 10:46:49 DEBUG [ApiV1EnvsIdDeleteEnvironmenthijack1] : Size [159] 2019-03-20 10:46:49 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : URL [http://13.56.210.25/api/v1/projects/] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Method [DELETE] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request [null] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response [{ "timestamp" : "2019-03-20T10:46:51.093+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/projects/" }] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZDA4YzE4MTctNDdkMy00MDJhLWI2ZWItNzMxNGI4NWE2NWEw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:51 GMT]}] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : StatusCode [405] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Time [1414] 2019-03-20 10:46:51 DEBUG [ApiV1ProjectsIdDeleteProjecthijack1] : Size [163] 2019-03-20 10:46:51 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : URL [http://13.56.210.25/api/v1/issue-trackers/issue-tracker-bot/] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Method [DELETE] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request [null] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response [{ "timestamp" : "2019-03-20T10:46:52.673+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/issue-trackers/issue-tracker-bot/" }] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Response-Headers [{Allow=[POST, GET, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MDVjNDI0YzQtMDA5Yi00MmI1LWExODMtODlkNDQ0ODI1ZWE2; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:52 GMT]}] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : StatusCode [405] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Time [1578] 2019-03-20 10:46:52 DEBUG [ApiV1IssueTrackersIssueTrackerBotIdDeleteIssuetrackerhijack1] : Size [187] 2019-03-20 10:46:52 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : URL [http://13.56.210.25/api/v1/skills/] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Method [DELETE] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request [null] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response [{ "timestamp" : "2019-03-20T10:46:54.580+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/skills/" }] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Response-Headers [{Allow=[GET, POST, PUT], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NmQ3MWRlYTktNWY0Ni00OGQzLTkzYmYtNzBlOGIyNWY3YjVi; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:54 GMT]}] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : StatusCode [405] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Time [1907] 2019-03-20 10:46:54 DEBUG [ApiV1SkillsIdDeleteSkillhijack1] : Size [161] 2019-03-20 10:46:54 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : URL [http://13.56.210.25/api/v1/accounts/] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Method [DELETE] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request [null] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response [{ "timestamp" : "2019-03-20T10:46:55.915+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/accounts/" }] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=MTRmMzNkNGYtZGMzNC00OTIxLWIwMGYtOWNhMzZmNThjY2U4; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:55 GMT]}] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : StatusCode [405] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Time [1333] 2019-03-20 10:46:55 DEBUG [ApiV1AccountsIdDeleteAccounthijack1] : Size [163] 2019-03-20 10:46:55 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : URL [http://13.56.210.25/api/v1/orgs/] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Method [DELETE] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request [null] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic T1JHQi8vdXNlckJAdGVzdGxhYnMuaW86b3JnMTIzNCQ=]}] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response [{ "timestamp" : "2019-03-20T10:46:57.418+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/orgs/" }] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=ZDhjYmEyZTgtMjU4Yy00ZjBhLWFkNGUtOWVjYjU1MmE3MmVj; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Wed, 20 Mar 2019 10:46:57 GMT]}] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : StatusCode [405] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Time [1501] 2019-03-20 10:46:57 DEBUG [ApiV1OrgsIdDeleteOrghijack1] : Size [159] 2019-03-20 10:46:57 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed]

--- FX Bot ---