Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5472907ed46d8c0c9de259a1fc6d228e7b309370a
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/attachments/{attachmentId}
DELETE /api/blast-plans/{planId}/change-worker/roles/{role}
DELETE /api/bmps/{bmpId}/change-blast-manager
DELETE /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project
DELETE /api/companies/{companyId}/credentials/{integrationType}
DELETE /api/projects/contacts/{contactId}
DELETE /api/projects/{projectId}/hierarchy/{nodeId}
DELETE /api/projects/{projectId}/users/{userId}
DELETE /shipment/{id}
GET /api/all/blast-plans/{planId}
GET /api/all/bmps/{bmpId}
GET /api/all/bmps/{bmpId}/blast-plans
GET /api/all/projects
GET /api/blast-holes/{holeId}
GET /api/blast-plan-statuses
GET /api/blast-plan/explosives/{explosiveId}
GET /api/blast-plans/{planId}
GET /api/blast-plans/{planId}/attachments/{type}
GET /api/blast-plans/{planId}/blast-set
GET /api/blast-plans/{planId}/employees/{role}
GET /api/blast-plans/{planId}/explosive-warehouses
GET /api/blast-plans/{planId}/ignition-configuration
GET /api/blast-plans/{planId}/map-markers
GET /api/blast-plans/{planId}/projects/contacts
GET /api/blast-plans/{planId}/residents-notification-message
GET /api/blast-plans/{planId}/rows-overview
GET /api/blast-plans/{planId}/sms-config
GET /api/blast-plans/{planId}/undetonated-charges
GET /api/blast-plans/{planId}/vibration-measurements
GET /api/blast-rows-types
GET /api/blast-rows/{rowId}
GET /api/blast-rows/{rowId}/holes
GET /api/blast-sets/{setId}
GET /api/blast-sets/{setId}/blast-sequence
GET /api/blast-sets/{setId}/ignition-configuration
GET /api/blast-sets/{setId}/ignition-configuration-reference/{type}
GET /api/blast-sets/{setId}/ignition-plan
GET /api/blast-sets/{setId}/plan-preview
GET /api/blast-sets/{setId}/real-tunnel-dimensions
GET /api/blast-sets/{setId}/report
GET /api/blast-sets/{setId}/row/{rowType}
GET /api/blast-sets/{setId}/rows
GET /api/blast-sets/{setId}/rows-overview
GET /api/blast-sets/{setId}/rows-sequence
GET /api/blast-sets/{setId}/rows/{rowType}
GET /api/bmp-sensors/{sensorId}
GET /api/bmp/explosives/{explosiveId}
GET /api/bmps/{bmpId}
GET /api/bmps/{bmpId}/available-integrations
GET /api/bmps/{bmpId}/blast-plan-markers
GET /api/bmps/{bmpId}/blast-plan-statuses
GET /api/bmps/{bmpId}/blast-plans
GET /api/bmps/{bmpId}/company
GET /api/bmps/{bmpId}/employees/{role}
GET /api/bmps/{bmpId}/groups/{group}/risks
GET /api/bmps/{bmpId}/map-markers
GET /api/bmps/{bmpId}/notification/contacts
GET /api/bmps/{bmpId}/notification/contacts/count
GET /api/bmps/{bmpId}/notification/contacts/custom
GET /api/bmps/{bmpId}/notification/group/{key}/categories
GET /api/bmps/{bmpId}/post-plan-markers
GET /api/bmps/{bmpId}/road-lines-map
GET /api/bmps/{bmpId}/road-lines-navigation
GET /api/bmps/{bmpId}/sensors
GET /api/bmps/{bmpId}/statistics
GET /api/bmps/{bmpId}/status
GET /api/bmps/{bmpId}/vibration-integrations
GET /api/bmps/{bmpId}/vibration-integrations/{integrationType}/projects
GET /api/charges/holes/{holeId}
GET /api/companies
GET /api/companies/{companyId}
GET /api/companies/{companyId}/contacts
GET /api/companies/{companyId}/employees
GET /api/companies/{companyId}/explosive-warehouses
GET /api/companies/{companyId}/projects
GET /api/companies/{companyId}/shipments
GET /api/companies/{companyId}/warehouses-stocks-transfers
GET /api/economy-report/projects
GET /api/employees/{employeeId}
GET /api/employees/{employeeId}/roles
GET /api/explosive-warehouses/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}
GET /api/explosive-warehouses/{warehouseId}/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}/stocks
GET /api/explosives/blast-plans/{planId}
GET /api/explosives/blast-plans/{planId}/grouped
GET /api/explosives/bmp/blast-plans/{planId}
GET /api/explosives/bmps/{bmpId}
GET /api/explosives/bmps/{bmpId}/grouped
GET /api/explosives/catalog/{supplier}
GET /api/explosives/suppliers
GET /api/filters
GET /api/holes-charges/sets/{setId}/rows/{rowType}
GET /api/holes-charges/{holeChargeId}
GET /api/invitations
GET /api/invitations-count
GET /api/map-markers/{markerId}
GET /api/notification/contact/{id}
GET /api/party/notification/{id}
GET /api/projects
GET /api/projects/{projectId}
GET /api/projects/{projectId}/blast-plan-markers
GET /api/projects/{projectId}/blast-plans
GET /api/projects/{projectId}/bmp-employees/{role}
GET /api/projects/{projectId}/bmp-owners
GET /api/projects/{projectId}/bmp-statuses
GET /api/projects/{projectId}/bmps
GET /api/projects/{projectId}/bmps/named-list
GET /api/projects/{projectId}/companies/{companyId}/users
GET /api/projects/{projectId}/contacts
GET /api/projects/{projectId}/flat-hierarchy
GET /api/projects/{projectId}/hierarchy
GET /api/projects/{projectId}/hierarchy/users
GET /api/projects/{projectId}/statistics
GET /api/projects/{projectId}/users
GET /api/projects/{projectsId}/blast-plan-statuses
GET /api/road-lines/{roadLineId}
GET /api/rows/{rowType}/charge-prototype
GET /api/security/blast-plans/{planId}
GET /api/security/bmps/{bmpId}
GET /api/security/companies/{companyId}
GET /api/security/companies/{companyId}/projects
GET /api/security/projects/{projectId}
GET /api/stocks/{stockId}
GET /api/transfers-stocks/{transferStockId}
GET /api/undetonated-charge/{chargeId}
GET /api/user
GET /api/user-companies
GET /api/user-employee-companies
GET /api/user/config
GET /api/user/notifications
GET /api/user/notifications/count
GET /api/users
GET /api/users/{userId}
GET /api/users/{userId}/config
GET /api/v2/security/projects/{projectId}
GET /api/warehouses-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}/attachments
GET /api/warehouses-stocks-transfers/{transferId}
GET /api/warehouses-stocks-transfers/{transferId}/stocks
GET /api/warehouses/{warehouseId}/inventories
GET /api/warehouses/{warehouseId}/room-inventories
GET /api/worker-change-requests
GET /public/api/invitations/hash/{hash}
GET /public/api/mapbox/configuration
GET /public/api/otc/{code}
GET /public/api/risks/groups
GET /public/api/risks/{bmpId}
GET /public/api/roles
GET /public/api/units/{unitType}
GET /public/push/phone/{phone}
POST /api/blast-plans/{planId}/actual-blast-time-removal
POST /api/blast-plans/{planId}/cancellation
POST /api/blast-plans/{planId}/change-worker/{employeeId}/roles/{role}
POST /api/blast-plans/{planId}/share-report-file
POST /api/blast-plans/{planId}/undetonated-charge
POST /api/blast-rows/{rowId}/holes-dimensions
POST /api/blast-sets-statistics
POST /api/blast-sets/blast-plans/{planId}
POST /api/blast-sets/{setId}/coordinates
POST /api/blast-sets/{setId}/holes-coordinates
POST /api/blast-sets/{setId}/ignition-plan-attachment
POST /api/bmps/{bmpId}/change-blast-manager/{employeeId}
POST /api/bmps/{bmpId}/default-risks
POST /api/bmps/{bmpId}/notification/contact
POST /api/bmps/{bmpId}/notification/group/{key}/category
POST /api/bmps/{bmpId}/road-lines
POST /api/bmps/{bmpId}/road-lines/invitation
POST /api/bmps/{bmpId}/share-report-file
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/refresh
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/{integrationProjectId}
POST /api/bmps/{fromBmpId}/notification/contacts/to/{toBmpId}
POST /api/companies/{companyId}/credentials
POST /api/companies/{companyId}/projects/{projectId}/economy-report/prices
POST /api/companies/{companyId}/projects/{projectId}/invitations
POST /api/companies/{orgNo}
POST /api/employees/{employeeId}/sms/resend
POST /api/explosive-warehouses/transfer/all/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/transfer/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/{warehouseId}/closure
POST /api/explosive-warehouses/{warehouseId}/share-report
POST /api/explosive-warehouses/{warehouseId}/{articleId}
POST /api/explosives/blast-plans/{planId}/bmp-explosive-materials
POST /api/explosives/blast-plans/{planId}/warehouse-explosive-materials
POST /api/explosives/catalog/{supplier}/extended
POST /api/explosives/catalog/{supplier}/simple
POST /api/mitigations/{mitigationId}
POST /api/notifications/{notificationId}/attachments
POST /api/project-sets-maps
POST /api/risks/{riskId}
POST /api/shipments/{shipmentId}/processing
POST /api/shipments/{shipmentId}/warehouses/{warehouseId}
POST /api/user/data-sharing
POST /api/user/firebase-cloud-messaging-token
POST /api/user/notifications/{notificationId}
POST /api/user/request-removal
POST /api/users/new-version-notification
POST /api/warehouses-inventories/{inventoryId}/share-report
POST /api/warehouses-stocks-transfers/{transferId}/share-document
POST /api/warehouses-stocks-transfers/{transfer}
POST /api/warehouses/{warehouseId}/room-inventories/{inventoryType}
POST /api/worker-change-requests/{requestId}/invitation-response
POST /public/api/invitations/{invitationId}/accept
POST /public/api/invitations/{invitationId}/accept-for-new
POST /public/api/invitations/{invitationId}/decline
POST /public/api/phone/{phone}/otc
POST /public/api/tripletex/companies/{orgNo}
POST /public/api/users
POST /public/uploadcare/webhook
POST /shipment/upload
PUT /api/bmps/{bmpId}/status/{status}
PUT /api/bmps/{bmpId}/warehouse/{withWarehouse}
PUT /api/employees/{employeeId}/status
PUT /api/holes-charges/holes
PUT /api/holes-charges/holes/{holeId}
PUT /api/holes-charges/rows/{rowId}
PUT /api/project-sensors/{sensorId}
PUT /api/projects/{projectId}/hierarchy/rearrange
PUT /api/projects/{projectId}/status/{status}
PUT /api/warehouses-room-inventories/points/{pointId}
PUT /public/api/otc
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5472907ed46d8c0c9de259a1fc6d228e7b309370a
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/attachments/{attachmentId}
DELETE /api/blast-plans/{planId}/change-worker/roles/{role}
DELETE /api/bmps/{bmpId}/change-blast-manager
DELETE /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project
DELETE /api/companies/{companyId}/credentials/{integrationType}
DELETE /api/projects/contacts/{contactId}
DELETE /api/projects/{projectId}/hierarchy/{nodeId}
DELETE /api/projects/{projectId}/users/{userId}
DELETE /shipment/{id}
GET /api/all/blast-plans/{planId}
GET /api/all/bmps/{bmpId}
GET /api/all/bmps/{bmpId}/blast-plans
GET /api/all/projects
GET /api/blast-holes/{holeId}
GET /api/blast-plan-statuses
GET /api/blast-plan/explosives/{explosiveId}
GET /api/blast-plans/{planId}
GET /api/blast-plans/{planId}/attachments/{type}
GET /api/blast-plans/{planId}/blast-set
GET /api/blast-plans/{planId}/employees/{role}
GET /api/blast-plans/{planId}/explosive-warehouses
GET /api/blast-plans/{planId}/ignition-configuration
GET /api/blast-plans/{planId}/map-markers
GET /api/blast-plans/{planId}/projects/contacts
GET /api/blast-plans/{planId}/residents-notification-message
GET /api/blast-plans/{planId}/rows-overview
GET /api/blast-plans/{planId}/sms-config
GET /api/blast-plans/{planId}/undetonated-charges
GET /api/blast-plans/{planId}/vibration-measurements
GET /api/blast-rows-types
GET /api/blast-rows/{rowId}
GET /api/blast-rows/{rowId}/holes
GET /api/blast-sets/{setId}
GET /api/blast-sets/{setId}/blast-sequence
GET /api/blast-sets/{setId}/ignition-configuration
GET /api/blast-sets/{setId}/ignition-configuration-reference/{type}
GET /api/blast-sets/{setId}/ignition-plan
GET /api/blast-sets/{setId}/plan-preview
GET /api/blast-sets/{setId}/real-tunnel-dimensions
GET /api/blast-sets/{setId}/report
GET /api/blast-sets/{setId}/row/{rowType}
GET /api/blast-sets/{setId}/rows
GET /api/blast-sets/{setId}/rows-overview
GET /api/blast-sets/{setId}/rows-sequence
GET /api/blast-sets/{setId}/rows/{rowType}
GET /api/bmp-sensors/{sensorId}
GET /api/bmp/explosives/{explosiveId}
GET /api/bmps/{bmpId}
GET /api/bmps/{bmpId}/available-integrations
GET /api/bmps/{bmpId}/blast-plan-markers
GET /api/bmps/{bmpId}/blast-plan-statuses
GET /api/bmps/{bmpId}/blast-plans
GET /api/bmps/{bmpId}/company
GET /api/bmps/{bmpId}/employees/{role}
GET /api/bmps/{bmpId}/groups/{group}/risks
GET /api/bmps/{bmpId}/map-markers
GET /api/bmps/{bmpId}/notification/contacts
GET /api/bmps/{bmpId}/notification/contacts/count
GET /api/bmps/{bmpId}/notification/contacts/custom
GET /api/bmps/{bmpId}/notification/group/{key}/categories
GET /api/bmps/{bmpId}/post-plan-markers
GET /api/bmps/{bmpId}/road-lines-map
GET /api/bmps/{bmpId}/road-lines-navigation
GET /api/bmps/{bmpId}/sensors
GET /api/bmps/{bmpId}/statistics
GET /api/bmps/{bmpId}/status
GET /api/bmps/{bmpId}/vibration-integrations
GET /api/bmps/{bmpId}/vibration-integrations/{integrationType}/projects
GET /api/charges/holes/{holeId}
GET /api/companies
GET /api/companies/{companyId}
GET /api/companies/{companyId}/contacts
GET /api/companies/{companyId}/employees
GET /api/companies/{companyId}/explosive-warehouses
GET /api/companies/{companyId}/projects
GET /api/companies/{companyId}/shipments
GET /api/companies/{companyId}/warehouses-stocks-transfers
GET /api/economy-report/projects
GET /api/employees/{employeeId}
GET /api/employees/{employeeId}/roles
GET /api/explosive-warehouses/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}
GET /api/explosive-warehouses/{warehouseId}/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}/stocks
GET /api/explosives/blast-plans/{planId}
GET /api/explosives/blast-plans/{planId}/grouped
GET /api/explosives/bmp/blast-plans/{planId}
GET /api/explosives/bmps/{bmpId}
GET /api/explosives/bmps/{bmpId}/grouped
GET /api/explosives/catalog/{supplier}
GET /api/explosives/suppliers
GET /api/filters
GET /api/holes-charges/sets/{setId}/rows/{rowType}
GET /api/holes-charges/{holeChargeId}
GET /api/invitations
GET /api/invitations-count
GET /api/map-markers/{markerId}
GET /api/notification/contact/{id}
GET /api/party/notification/{id}
GET /api/projects
GET /api/projects/{projectId}
GET /api/projects/{projectId}/blast-plan-markers
GET /api/projects/{projectId}/blast-plans
GET /api/projects/{projectId}/bmp-employees/{role}
GET /api/projects/{projectId}/bmp-owners
GET /api/projects/{projectId}/bmp-statuses
GET /api/projects/{projectId}/bmps
GET /api/projects/{projectId}/bmps/named-list
GET /api/projects/{projectId}/companies/{companyId}/users
GET /api/projects/{projectId}/contacts
GET /api/projects/{projectId}/flat-hierarchy
GET /api/projects/{projectId}/hierarchy
GET /api/projects/{projectId}/hierarchy/users
GET /api/projects/{projectId}/statistics
GET /api/projects/{projectId}/users
GET /api/projects/{projectsId}/blast-plan-statuses
GET /api/road-lines/{roadLineId}
GET /api/rows/{rowType}/charge-prototype
GET /api/security/blast-plans/{planId}
GET /api/security/bmps/{bmpId}
GET /api/security/companies/{companyId}
GET /api/security/companies/{companyId}/projects
GET /api/security/projects/{projectId}
GET /api/stocks/{stockId}
GET /api/transfers-stocks/{transferStockId}
GET /api/undetonated-charge/{chargeId}
GET /api/user
GET /api/user-companies
GET /api/user-employee-companies
GET /api/user/config
GET /api/user/notifications
GET /api/user/notifications/count
GET /api/users
GET /api/users/{userId}
GET /api/users/{userId}/config
GET /api/v2/security/projects/{projectId}
GET /api/warehouses-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}/attachments
GET /api/warehouses-stocks-transfers/{transferId}
GET /api/warehouses-stocks-transfers/{transferId}/stocks
GET /api/warehouses/{warehouseId}/inventories
GET /api/warehouses/{warehouseId}/room-inventories
GET /api/worker-change-requests
GET /public/api/invitations/hash/{hash}
GET /public/api/mapbox/configuration
GET /public/api/otc/{code}
GET /public/api/risks/groups
GET /public/api/risks/{bmpId}
GET /public/api/roles
GET /public/api/units/{unitType}
GET /public/push/phone/{phone}
POST /api/blast-plans/{planId}/actual-blast-time-removal
POST /api/blast-plans/{planId}/cancellation
POST /api/blast-plans/{planId}/change-worker/{employeeId}/roles/{role}
POST /api/blast-plans/{planId}/share-report-file
POST /api/blast-plans/{planId}/undetonated-charge
POST /api/blast-rows/{rowId}/holes-dimensions
POST /api/blast-sets-statistics
POST /api/blast-sets/blast-plans/{planId}
POST /api/blast-sets/{setId}/coordinates
POST /api/blast-sets/{setId}/holes-coordinates
POST /api/blast-sets/{setId}/ignition-plan-attachment
POST /api/bmps/{bmpId}/change-blast-manager/{employeeId}
POST /api/bmps/{bmpId}/default-risks
POST /api/bmps/{bmpId}/notification/contact
POST /api/bmps/{bmpId}/notification/group/{key}/category
POST /api/bmps/{bmpId}/road-lines
POST /api/bmps/{bmpId}/road-lines/invitation
POST /api/bmps/{bmpId}/share-report-file
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/refresh
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/{integrationProjectId}
POST /api/bmps/{fromBmpId}/notification/contacts/to/{toBmpId}
POST /api/companies/{companyId}/credentials
POST /api/companies/{companyId}/projects/{projectId}/economy-report/prices
POST /api/companies/{companyId}/projects/{projectId}/invitations
POST /api/companies/{orgNo}
POST /api/employees/{employeeId}/sms/resend
POST /api/explosive-warehouses/transfer/all/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/transfer/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/{warehouseId}/closure
POST /api/explosive-warehouses/{warehouseId}/share-report
POST /api/explosive-warehouses/{warehouseId}/{articleId}
POST /api/explosives/blast-plans/{planId}/bmp-explosive-materials
POST /api/explosives/blast-plans/{planId}/warehouse-explosive-materials
POST /api/explosives/catalog/{supplier}/extended
POST /api/explosives/catalog/{supplier}/simple
POST /api/mitigations/{mitigationId}
POST /api/notifications/{notificationId}/attachments
POST /api/project-sets-maps
POST /api/risks/{riskId}
POST /api/shipments/{shipmentId}/processing
POST /api/shipments/{shipmentId}/warehouses/{warehouseId}
POST /api/user/data-sharing
POST /api/user/firebase-cloud-messaging-token
POST /api/user/notifications/{notificationId}
POST /api/user/request-removal
POST /api/users/new-version-notification
POST /api/warehouses-inventories/{inventoryId}/share-report
POST /api/warehouses-stocks-transfers/{transferId}/share-document
POST /api/warehouses-stocks-transfers/{transfer}
POST /api/warehouses/{warehouseId}/room-inventories/{inventoryType}
POST /api/worker-change-requests/{requestId}/invitation-response
POST /public/api/invitations/{invitationId}/accept
POST /public/api/invitations/{invitationId}/accept-for-new
POST /public/api/invitations/{invitationId}/decline
POST /public/api/phone/{phone}/otc
POST /public/api/tripletex/companies/{orgNo}
POST /public/api/users
POST /public/uploadcare/webhook
POST /shipment/upload
PUT /api/bmps/{bmpId}/status/{status}
PUT /api/bmps/{bmpId}/warehouse/{withWarehouse}
PUT /api/employees/{employeeId}/status
PUT /api/holes-charges/holes
PUT /api/holes-charges/holes/{holeId}
PUT /api/holes-charges/rows/{rowId}
PUT /api/project-sensors/{sensorId}
PUT /api/projects/{projectId}/hierarchy/rearrange
PUT /api/projects/{projectId}/status/{status}
PUT /api/warehouses-room-inventories/points/{pointId}
PUT /public/api/otc
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Open service 3.33.249.164:443 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:33:54 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8xGk08VDZeRpctRW9%2BzbwnJ0y%2BvAR6x%2FDSIp2tfcS%2Bo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188835"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8xGk08VDZeRpctRW9%2BzbwnJ0y%2BvAR6x%2FDSIp2tfcS%2Bo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188835"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 15.197.253.240:443 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:33:54 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8xGk08VDZeRpctRW9%2BzbwnJ0y%2BvAR6x%2FDSIp2tfcS%2Bo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188835"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8xGk08VDZeRpctRW9%2BzbwnJ0y%2BvAR6x%2FDSIp2tfcS%2Bo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188835"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:80 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:34:55 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188895"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188895"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:80 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:34:55 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188895"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188895"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 15.197.253.240:80 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:34:55 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188895"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188895"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:443 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:33:53 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BgG1w1pVe1xq25T3K6H2qY7iBFy%2BvaNmDzAldS34NYI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188834"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BgG1w1pVe1xq25T3K6H2qY7iBFy%2BvaNmDzAldS34NYI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188834"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 3.33.249.164:80 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:34:55 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188895"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XjKtlUmIFg9lw5kN%2BsRZF1766xkz0asoysu%2F6iQG3qI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188895"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:443 · api-dev.deton.no
2026-01-12 03:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 12 Jan 2026 03:33:53 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BgG1w1pVe1xq25T3K6H2qY7iBFy%2BvaNmDzAldS34NYI%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768188834"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BgG1w1pVe1xq25T3K6H2qY7iBFy%2BvaNmDzAldS34NYI%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768188834"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:80 · api-dev.deton.no
2026-01-09 19:56
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 09 Jan 2026 19:57:33 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=P0vq%2FFFAbGUjx1gykmRUzm7BOkiR9zo1nBXN1YM%2BVTQ%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767988653"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=P0vq%2FFFAbGUjx1gykmRUzm7BOkiR9zo1nBXN1YM%2BVTQ%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767988653"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:443 · api-dev.deton.no
2026-01-09 07:01
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 09 Jan 2026 07:01:02 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4HDU56P9aJvx%2FMI%2BOw7%2FK3JSD1cPquG9cI2jvoTRlU8%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767942062"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4HDU56P9aJvx%2FMI%2BOw7%2FK3JSD1cPquG9cI2jvoTRlU8%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767942062"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:80 · api-dev.deton.no
2026-01-02 21:59
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 02 Jan 2026 21:59:37 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=9cf9cIcrSkv8SOfT7dXDIppveqE6HXh3Jq%2BFrQ5vkWw%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767391177"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=9cf9cIcrSkv8SOfT7dXDIppveqE6HXh3Jq%2BFrQ5vkWw%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767391177"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:443 · api-dev.deton.no
2026-01-02 08:08
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 02 Jan 2026 08:08:35 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=munyPwEiNZI1%2FdBeO1TzFh4fcsrke7aEm45EN16N8uw%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767341315"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=munyPwEiNZI1%2FdBeO1TzFh4fcsrke7aEm45EN16N8uw%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767341315"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:80 · api-dev.deton.no
2025-12-23 07:25
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Tue, 23 Dec 2025 07:25:05 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=EzpSv1ENyzP%2BkSRoK9PYqFheWpyw5k%2BMrCyfuKgIq1E%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766474705"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=EzpSv1ENyzP%2BkSRoK9PYqFheWpyw5k%2BMrCyfuKgIq1E%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766474705"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:443 · api-dev.deton.no
2025-12-22 13:00
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 22 Dec 2025 13:00:44 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=akckSafG9QjAkwmRYz4hqd3jv2zB049JAUz%2FGXIwMdw%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766408444"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=akckSafG9QjAkwmRYz4hqd3jv2zB049JAUz%2FGXIwMdw%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766408444"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:80 · api-dev.deton.no
2025-12-20 23:43
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Sat, 20 Dec 2025 23:43:45 GMT
Expires: 0
Location: http://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=yeEGqvscR49duMOh2VOzJiWjcY2CStyugHmYj0sBXjo%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766274225"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=yeEGqvscR49duMOh2VOzJiWjcY2CStyugHmYj0sBXjo%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766274225"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:443 · api-dev.deton.no
2025-12-20 15:43
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Sat, 20 Dec 2025 15:43:26 GMT
Expires: 0
Location: https://api-dev.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=XIILN9JirfgVgGPAegLu695%2FYuWpJi644mMLWneSOLE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766245406"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=XIILN9JirfgVgGPAegLu695%2FYuWpJi644mMLWneSOLE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766245406"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close