jaleelsyed / online-banking

0 stars 0 forks source link

online banking app : ApiV1OrgsIdUsersGetUserbDisallowAbac #14

Open jaleelsyed opened 5 years ago

jaleelsyed commented 5 years ago

Project : online banking app

Job : Default

Env : Default

Category : null

Tags : null

Severity : null

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 403

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM2Njc5OWUtM2RiNy00NzNjLTljM2UtM2M3MmM4NzU5YjYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 04:53:59 GMT]}

Endpoint : http://54.215.136.217/api/v1/orgs//users

Request :

Response :
{ "timestamp" : "2019-01-24T04:53:59.472+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }

Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [403 == 401 OR 403 == 403 OR == true] result [Passed] --- FX Bot ---

jaleelsyed commented 5 years ago

Project : online banking app

Job : Default

Env : Default

Message : This issue is manually closed from FX control plane.

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 403

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjM2Njc5OWUtM2RiNy00NzNjLTljM2UtM2M3MmM4NzU5YjYz; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 04:53:59 GMT]}

Endpoint : http://54.215.136.217/api/v1/orgs//users

Request :

Response :
{ "timestamp" : "2019-01-24T04:53:59.472+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }

Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [403 == 401 OR 403 == 403 OR == true] result [Passed] --- FX Bot ---

jaleelsyed commented 5 years ago

Message : null

Project : online banking app

Job : Default

Env : Default

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 403

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjBmNmJlY2MtMDg1NS00NDY3LWFmNGItYmZjMzYxZmRiOWEw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:28:57 GMT]}

Endpoint : http://54.215.136.217/api/v1/orgs//users

Request :

Response :
{ "timestamp" : "2019-01-24T09:28:58.579+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }

Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [403 == 401 OR 403 == 403 OR == true] result [Passed] --- FX Bot ---

jaleelsyed commented 5 years ago

Message : This issue is manually closed from FX control plane.

Project : online banking app

Job : Default

Env : Default

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 403

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YjBmNmJlY2MtMDg1NS00NDY3LWFmNGItYmZjMzYxZmRiOWEw; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:28:57 GMT]}

Endpoint : http://54.215.136.217/api/v1/orgs//users

Request :

Response :
{ "timestamp" : "2019-01-24T09:28:58.579+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }

Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [403 == 401 OR 403 == 403 OR == true] result [Passed] --- FX Bot ---

jaleelsyed commented 5 years ago

Message : null

Project : online banking app

Job : Default

Env : Default

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 403

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTU3YmNiMzktMmEyNy00NThlLTk3ZWEtOWZlOGY0NjA5MDBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:07 GMT]}

Endpoint : http://54.215.136.217/api/v1/orgs//users

Request :

Response :
{ "timestamp" : "2019-01-24T09:45:07.423+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }

Logs :
2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : URL [http://54.215.136.217/api/v1/orgs] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Method [POST] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Request [{ "billingEmail" : "dennis.weissnat@gmail.com", "company" : "Tillman Inc", "createdBy" : "", "createdDate" : "", "description" : "2Tok21Nx", "id" : "", "inactive" : false, "location" : "2Tok21Nx", "modifiedBy" : "", "modifiedDate" : "", "name" : "2Tok21Nx", "orgPlan" : "BUSINESS", "orgType" : "ENTERPRISE", "version" : "" }] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlcjJAb25saW5lc3VwcG9ydC5pbzphZG1pbjEyMyQ=]}] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Response [{ "timestamp" : "2019-01-24T09:45:06.173+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs" }] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2JhNjcyMGQtNTdiMC00OGY1LWEzYTktMDVhYjJjMmEzMzhk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:05 GMT]}] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : StatusCode [403] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Time [1595] 2019-01-24 09:45:05 DEBUG [ OrgCreateUserAInitAbac] : Size [121] 2019-01-24 09:45:05 ERROR [null] : Assertion [@StatusCode == 200 AND @Response.errors == false] resolved-to [403 == 200 AND == false] result [Failed] 2019-01-24 09:45:05 DEBUG [OrgCreateUserAInitAbac_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2JhNjcyMGQtNTdiMC00OGY1LWEzYTktMDVhYjJjMmEzMzhk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:05 GMT]}] 2019-01-24 09:45:05 DEBUG [OrgCreateUserAInitAbac_Headers] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2JhNjcyMGQtNTdiMC00OGY1LWEzYTktMDVhYjJjMmEzMzhk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:05 GMT]}] 2019-01-24 09:45:05 DEBUG [OrgCreateUserAInitAbac_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2JhNjcyMGQtNTdiMC00OGY1LWEzYTktMDVhYjJjMmEzMzhk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:05 GMT]}] 2019-01-24 09:45:05 DEBUG [OrgCreateUserAInitAbac_Headers[2]] : Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=N2JhNjcyMGQtNTdiMC00OGY1LWEzYTktMDVhYjJjMmEzMzhk; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:05 GMT]}] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : URL [http://54.215.136.217/api/v1/orgs//users] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Method [GET] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Request [] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlcjNAb25saW5lc3VwcG9ydC5pbzphZG1pbjEyMyQ=]}] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Response [{ "timestamp" : "2019-01-24T09:45:07.423+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Response-Headers [{X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTU3YmNiMzktMmEyNy00NThlLTk3ZWEtOWZlOGY0NjA5MDBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:07 GMT]}] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : StatusCode [403] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Time [1214] 2019-01-24 09:45:07 DEBUG [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Size [127] 2019-01-24 09:45:07 INFO [ApiV1OrgsIdUsersGetUserbDisallowAbac] : Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [403 == 401 OR 403 == 403 OR == true] result [Passed] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : URL [http://54.215.136.217/api/v1/orgs/] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Method [DELETE] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Request [null] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Request-Headers [{Content-Type=[application/json], Accept=[application/json], Authorization=[Basic dXNlcjJAb25saW5lc3VwcG9ydC5pbzphZG1pbjEyMyQ=]}] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Response [{ "timestamp" : "2019-01-24T09:45:08.452+0000", "status" : 405, "error" : "Method Not Allowed", "message" : "Request method 'DELETE' not supported", "path" : "/api/v1/orgs/" }] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Response-Headers [{Allow=[GET, POST], X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=YWUzZDRkN2YtOWYzYS00OGQ3LTk0YzctNTUzZjlmZjliYjc5; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:08 GMT]}] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : StatusCode [405] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Time [1031] 2019-01-24 09:45:08 DEBUG [ApiV1OrgsIdDeleteAbstractAbac] : Size [159] 2019-01-24 09:45:08 ERROR [null] : Assertion [@StatusCode == 200] resolved-to [405 == 200] result [Failed]

--- FX Bot ---

jaleelsyed commented 5 years ago

Message : This issue is manually closed from FX control plane.

Project : online banking app

Job : Default

Env : Default

Region : FXLabs/US_WEST_1

Result : fail

Status Code : 403

Headers : {X-Content-Type-Options=[nosniff], X-XSS-Protection=[1; mode=block], Cache-Control=[no-cache, no-store, max-age=0, must-revalidate], Pragma=[no-cache], Expires=[0], X-Frame-Options=[DENY], Set-Cookie=[SESSION=NTU3YmNiMzktMmEyNy00NThlLTk3ZWEtOWZlOGY0NjA5MDBm; Path=/; HttpOnly], Content-Type=[application/json;charset=UTF-8], Transfer-Encoding=[chunked], Date=[Thu, 24 Jan 2019 09:45:07 GMT]}

Endpoint : http://54.215.136.217/api/v1/orgs//users

Request :

Response :
{ "timestamp" : "2019-01-24T09:45:07.423+0000", "status" : 403, "error" : "Forbidden", "message" : "Forbidden", "path" : "/api/v1/orgs/users" }

Logs :
Assertion [@StatusCode == 401 OR @StatusCode == 403 OR @Response.errors == true] resolved-to [403 == 401 OR 403 == 403 OR == true] result [Passed] --- FX Bot ---