Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5472907ed46d8c0c9de259a1fc6d228e7b309370a
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/attachments/{attachmentId}
DELETE /api/blast-plans/{planId}/change-worker/roles/{role}
DELETE /api/bmps/{bmpId}/change-blast-manager
DELETE /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project
DELETE /api/companies/{companyId}/credentials/{integrationType}
DELETE /api/projects/contacts/{contactId}
DELETE /api/projects/{projectId}/hierarchy/{nodeId}
DELETE /api/projects/{projectId}/users/{userId}
DELETE /shipment/{id}
GET /api/all/blast-plans/{planId}
GET /api/all/bmps/{bmpId}
GET /api/all/bmps/{bmpId}/blast-plans
GET /api/all/projects
GET /api/blast-holes/{holeId}
GET /api/blast-plan-statuses
GET /api/blast-plan/explosives/{explosiveId}
GET /api/blast-plans/{planId}
GET /api/blast-plans/{planId}/attachments/{type}
GET /api/blast-plans/{planId}/blast-set
GET /api/blast-plans/{planId}/employees/{role}
GET /api/blast-plans/{planId}/explosive-warehouses
GET /api/blast-plans/{planId}/ignition-configuration
GET /api/blast-plans/{planId}/map-markers
GET /api/blast-plans/{planId}/projects/contacts
GET /api/blast-plans/{planId}/residents-notification-message
GET /api/blast-plans/{planId}/rows-overview
GET /api/blast-plans/{planId}/sms-config
GET /api/blast-plans/{planId}/undetonated-charges
GET /api/blast-plans/{planId}/vibration-measurements
GET /api/blast-rows-types
GET /api/blast-rows/{rowId}
GET /api/blast-rows/{rowId}/holes
GET /api/blast-sets/{setId}
GET /api/blast-sets/{setId}/blast-sequence
GET /api/blast-sets/{setId}/ignition-configuration
GET /api/blast-sets/{setId}/ignition-configuration-reference/{type}
GET /api/blast-sets/{setId}/ignition-plan
GET /api/blast-sets/{setId}/plan-preview
GET /api/blast-sets/{setId}/real-tunnel-dimensions
GET /api/blast-sets/{setId}/report
GET /api/blast-sets/{setId}/row/{rowType}
GET /api/blast-sets/{setId}/rows
GET /api/blast-sets/{setId}/rows-overview
GET /api/blast-sets/{setId}/rows-sequence
GET /api/blast-sets/{setId}/rows/{rowType}
GET /api/bmp-sensors/{sensorId}
GET /api/bmp/explosives/{explosiveId}
GET /api/bmps/{bmpId}
GET /api/bmps/{bmpId}/available-integrations
GET /api/bmps/{bmpId}/blast-plan-markers
GET /api/bmps/{bmpId}/blast-plan-statuses
GET /api/bmps/{bmpId}/blast-plans
GET /api/bmps/{bmpId}/company
GET /api/bmps/{bmpId}/employees/{role}
GET /api/bmps/{bmpId}/groups/{group}/risks
GET /api/bmps/{bmpId}/map-markers
GET /api/bmps/{bmpId}/notification/contacts
GET /api/bmps/{bmpId}/notification/contacts/count
GET /api/bmps/{bmpId}/notification/contacts/custom
GET /api/bmps/{bmpId}/notification/group/{key}/categories
GET /api/bmps/{bmpId}/post-plan-markers
GET /api/bmps/{bmpId}/road-lines-map
GET /api/bmps/{bmpId}/road-lines-navigation
GET /api/bmps/{bmpId}/sensors
GET /api/bmps/{bmpId}/statistics
GET /api/bmps/{bmpId}/status
GET /api/bmps/{bmpId}/vibration-integrations
GET /api/bmps/{bmpId}/vibration-integrations/{integrationType}/projects
GET /api/charges/holes/{holeId}
GET /api/companies
GET /api/companies/{companyId}
GET /api/companies/{companyId}/contacts
GET /api/companies/{companyId}/employees
GET /api/companies/{companyId}/explosive-warehouses
GET /api/companies/{companyId}/projects
GET /api/companies/{companyId}/shipments
GET /api/companies/{companyId}/warehouses-stocks-transfers
GET /api/economy-report/projects
GET /api/employees/{employeeId}
GET /api/employees/{employeeId}/roles
GET /api/explosive-warehouses/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}
GET /api/explosive-warehouses/{warehouseId}/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}/stocks
GET /api/explosives/blast-plans/{planId}
GET /api/explosives/blast-plans/{planId}/grouped
GET /api/explosives/bmp/blast-plans/{planId}
GET /api/explosives/bmps/{bmpId}
GET /api/explosives/bmps/{bmpId}/grouped
GET /api/explosives/catalog/{supplier}
GET /api/explosives/suppliers
GET /api/filters
GET /api/holes-charges/sets/{setId}/rows/{rowType}
GET /api/holes-charges/{holeChargeId}
GET /api/invitations
GET /api/invitations-count
GET /api/map-markers/{markerId}
GET /api/notification/contact/{id}
GET /api/party/notification/{id}
GET /api/projects
GET /api/projects/{projectId}
GET /api/projects/{projectId}/blast-plan-markers
GET /api/projects/{projectId}/blast-plans
GET /api/projects/{projectId}/bmp-employees/{role}
GET /api/projects/{projectId}/bmp-owners
GET /api/projects/{projectId}/bmp-statuses
GET /api/projects/{projectId}/bmps
GET /api/projects/{projectId}/bmps/named-list
GET /api/projects/{projectId}/companies/{companyId}/users
GET /api/projects/{projectId}/contacts
GET /api/projects/{projectId}/flat-hierarchy
GET /api/projects/{projectId}/hierarchy
GET /api/projects/{projectId}/hierarchy/users
GET /api/projects/{projectId}/statistics
GET /api/projects/{projectId}/users
GET /api/projects/{projectsId}/blast-plan-statuses
GET /api/road-lines/{roadLineId}
GET /api/rows/{rowType}/charge-prototype
GET /api/security/blast-plans/{planId}
GET /api/security/bmps/{bmpId}
GET /api/security/companies/{companyId}
GET /api/security/companies/{companyId}/projects
GET /api/security/projects/{projectId}
GET /api/stocks/{stockId}
GET /api/transfers-stocks/{transferStockId}
GET /api/undetonated-charge/{chargeId}
GET /api/user
GET /api/user-companies
GET /api/user-employee-companies
GET /api/user/config
GET /api/user/notifications
GET /api/user/notifications/count
GET /api/users
GET /api/users/{userId}
GET /api/users/{userId}/config
GET /api/v2/security/projects/{projectId}
GET /api/warehouses-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}/attachments
GET /api/warehouses-stocks-transfers/{transferId}
GET /api/warehouses-stocks-transfers/{transferId}/stocks
GET /api/warehouses/{warehouseId}/inventories
GET /api/warehouses/{warehouseId}/room-inventories
GET /api/worker-change-requests
GET /public/api/invitations/hash/{hash}
GET /public/api/mapbox/configuration
GET /public/api/otc/{code}
GET /public/api/risks/groups
GET /public/api/risks/{bmpId}
GET /public/api/roles
GET /public/api/units/{unitType}
GET /public/push/phone/{phone}
POST /api/blast-plans/{planId}/actual-blast-time-removal
POST /api/blast-plans/{planId}/cancellation
POST /api/blast-plans/{planId}/change-worker/{employeeId}/roles/{role}
POST /api/blast-plans/{planId}/share-report-file
POST /api/blast-plans/{planId}/undetonated-charge
POST /api/blast-rows/{rowId}/holes-dimensions
POST /api/blast-sets-statistics
POST /api/blast-sets/blast-plans/{planId}
POST /api/blast-sets/{setId}/coordinates
POST /api/blast-sets/{setId}/holes-coordinates
POST /api/blast-sets/{setId}/ignition-plan-attachment
POST /api/bmps/{bmpId}/change-blast-manager/{employeeId}
POST /api/bmps/{bmpId}/default-risks
POST /api/bmps/{bmpId}/notification/contact
POST /api/bmps/{bmpId}/notification/group/{key}/category
POST /api/bmps/{bmpId}/road-lines
POST /api/bmps/{bmpId}/road-lines/invitation
POST /api/bmps/{bmpId}/share-report-file
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/refresh
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/{integrationProjectId}
POST /api/bmps/{fromBmpId}/notification/contacts/to/{toBmpId}
POST /api/companies/{companyId}/credentials
POST /api/companies/{companyId}/projects/{projectId}/economy-report/prices
POST /api/companies/{companyId}/projects/{projectId}/invitations
POST /api/companies/{orgNo}
POST /api/employees/{employeeId}/sms/resend
POST /api/explosive-warehouses/transfer/all/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/transfer/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/{warehouseId}/closure
POST /api/explosive-warehouses/{warehouseId}/share-report
POST /api/explosive-warehouses/{warehouseId}/{articleId}
POST /api/explosives/blast-plans/{planId}/bmp-explosive-materials
POST /api/explosives/blast-plans/{planId}/warehouse-explosive-materials
POST /api/explosives/catalog/{supplier}/extended
POST /api/explosives/catalog/{supplier}/simple
POST /api/mitigations/{mitigationId}
POST /api/notifications/{notificationId}/attachments
POST /api/project-sets-maps
POST /api/risks/{riskId}
POST /api/shipments/{shipmentId}/processing
POST /api/shipments/{shipmentId}/warehouses/{warehouseId}
POST /api/user/data-sharing
POST /api/user/firebase-cloud-messaging-token
POST /api/user/notifications/{notificationId}
POST /api/user/request-removal
POST /api/users/new-version-notification
POST /api/warehouses-inventories/{inventoryId}/share-report
POST /api/warehouses-stocks-transfers/{transferId}/share-document
POST /api/warehouses-stocks-transfers/{transfer}
POST /api/warehouses/{warehouseId}/room-inventories/{inventoryType}
POST /api/worker-change-requests/{requestId}/invitation-response
POST /public/api/invitations/{invitationId}/accept
POST /public/api/invitations/{invitationId}/accept-for-new
POST /public/api/invitations/{invitationId}/decline
POST /public/api/phone/{phone}/otc
POST /public/api/tripletex/companies/{orgNo}
POST /public/api/users
POST /public/uploadcare/webhook
POST /shipment/upload
PUT /api/bmps/{bmpId}/status/{status}
PUT /api/bmps/{bmpId}/warehouse/{withWarehouse}
PUT /api/employees/{employeeId}/status
PUT /api/holes-charges/holes
PUT /api/holes-charges/holes/{holeId}
PUT /api/holes-charges/rows/{rowId}
PUT /api/project-sensors/{sensorId}
PUT /api/projects/{projectId}/hierarchy/rearrange
PUT /api/projects/{projectId}/status/{status}
PUT /api/warehouses-room-inventories/points/{pointId}
PUT /public/api/otc
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd1a8bcc6e5472907ed46d8c0c9de259a1fc6d228e7b309370a
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html - sample paths:
DELETE /api/attachments/{attachmentId}
DELETE /api/blast-plans/{planId}/change-worker/roles/{role}
DELETE /api/bmps/{bmpId}/change-blast-manager
DELETE /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project
DELETE /api/companies/{companyId}/credentials/{integrationType}
DELETE /api/projects/contacts/{contactId}
DELETE /api/projects/{projectId}/hierarchy/{nodeId}
DELETE /api/projects/{projectId}/users/{userId}
DELETE /shipment/{id}
GET /api/all/blast-plans/{planId}
GET /api/all/bmps/{bmpId}
GET /api/all/bmps/{bmpId}/blast-plans
GET /api/all/projects
GET /api/blast-holes/{holeId}
GET /api/blast-plan-statuses
GET /api/blast-plan/explosives/{explosiveId}
GET /api/blast-plans/{planId}
GET /api/blast-plans/{planId}/attachments/{type}
GET /api/blast-plans/{planId}/blast-set
GET /api/blast-plans/{planId}/employees/{role}
GET /api/blast-plans/{planId}/explosive-warehouses
GET /api/blast-plans/{planId}/ignition-configuration
GET /api/blast-plans/{planId}/map-markers
GET /api/blast-plans/{planId}/projects/contacts
GET /api/blast-plans/{planId}/residents-notification-message
GET /api/blast-plans/{planId}/rows-overview
GET /api/blast-plans/{planId}/sms-config
GET /api/blast-plans/{planId}/undetonated-charges
GET /api/blast-plans/{planId}/vibration-measurements
GET /api/blast-rows-types
GET /api/blast-rows/{rowId}
GET /api/blast-rows/{rowId}/holes
GET /api/blast-sets/{setId}
GET /api/blast-sets/{setId}/blast-sequence
GET /api/blast-sets/{setId}/ignition-configuration
GET /api/blast-sets/{setId}/ignition-configuration-reference/{type}
GET /api/blast-sets/{setId}/ignition-plan
GET /api/blast-sets/{setId}/plan-preview
GET /api/blast-sets/{setId}/real-tunnel-dimensions
GET /api/blast-sets/{setId}/report
GET /api/blast-sets/{setId}/row/{rowType}
GET /api/blast-sets/{setId}/rows
GET /api/blast-sets/{setId}/rows-overview
GET /api/blast-sets/{setId}/rows-sequence
GET /api/blast-sets/{setId}/rows/{rowType}
GET /api/bmp-sensors/{sensorId}
GET /api/bmp/explosives/{explosiveId}
GET /api/bmps/{bmpId}
GET /api/bmps/{bmpId}/available-integrations
GET /api/bmps/{bmpId}/blast-plan-markers
GET /api/bmps/{bmpId}/blast-plan-statuses
GET /api/bmps/{bmpId}/blast-plans
GET /api/bmps/{bmpId}/company
GET /api/bmps/{bmpId}/employees/{role}
GET /api/bmps/{bmpId}/groups/{group}/risks
GET /api/bmps/{bmpId}/map-markers
GET /api/bmps/{bmpId}/notification/contacts
GET /api/bmps/{bmpId}/notification/contacts/count
GET /api/bmps/{bmpId}/notification/contacts/custom
GET /api/bmps/{bmpId}/notification/group/{key}/categories
GET /api/bmps/{bmpId}/post-plan-markers
GET /api/bmps/{bmpId}/road-lines-map
GET /api/bmps/{bmpId}/road-lines-navigation
GET /api/bmps/{bmpId}/sensors
GET /api/bmps/{bmpId}/statistics
GET /api/bmps/{bmpId}/status
GET /api/bmps/{bmpId}/vibration-integrations
GET /api/bmps/{bmpId}/vibration-integrations/{integrationType}/projects
GET /api/charges/holes/{holeId}
GET /api/companies
GET /api/companies/{companyId}
GET /api/companies/{companyId}/contacts
GET /api/companies/{companyId}/employees
GET /api/companies/{companyId}/explosive-warehouses
GET /api/companies/{companyId}/projects
GET /api/companies/{companyId}/shipments
GET /api/companies/{companyId}/warehouses-stocks-transfers
GET /api/economy-report/projects
GET /api/employees/{employeeId}
GET /api/employees/{employeeId}/roles
GET /api/explosive-warehouses/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}
GET /api/explosive-warehouses/{warehouseId}/blast-plans/{planId}
GET /api/explosive-warehouses/{warehouseId}/stocks
GET /api/explosives/blast-plans/{planId}
GET /api/explosives/blast-plans/{planId}/grouped
GET /api/explosives/bmp/blast-plans/{planId}
GET /api/explosives/bmps/{bmpId}
GET /api/explosives/bmps/{bmpId}/grouped
GET /api/explosives/catalog/{supplier}
GET /api/explosives/suppliers
GET /api/filters
GET /api/holes-charges/sets/{setId}/rows/{rowType}
GET /api/holes-charges/{holeChargeId}
GET /api/invitations
GET /api/invitations-count
GET /api/map-markers/{markerId}
GET /api/notification/contact/{id}
GET /api/party/notification/{id}
GET /api/projects
GET /api/projects/{projectId}
GET /api/projects/{projectId}/blast-plan-markers
GET /api/projects/{projectId}/blast-plans
GET /api/projects/{projectId}/bmp-employees/{role}
GET /api/projects/{projectId}/bmp-owners
GET /api/projects/{projectId}/bmp-statuses
GET /api/projects/{projectId}/bmps
GET /api/projects/{projectId}/bmps/named-list
GET /api/projects/{projectId}/companies/{companyId}/users
GET /api/projects/{projectId}/contacts
GET /api/projects/{projectId}/flat-hierarchy
GET /api/projects/{projectId}/hierarchy
GET /api/projects/{projectId}/hierarchy/users
GET /api/projects/{projectId}/statistics
GET /api/projects/{projectId}/users
GET /api/projects/{projectsId}/blast-plan-statuses
GET /api/road-lines/{roadLineId}
GET /api/rows/{rowType}/charge-prototype
GET /api/security/blast-plans/{planId}
GET /api/security/bmps/{bmpId}
GET /api/security/companies/{companyId}
GET /api/security/companies/{companyId}/projects
GET /api/security/projects/{projectId}
GET /api/stocks/{stockId}
GET /api/transfers-stocks/{transferStockId}
GET /api/undetonated-charge/{chargeId}
GET /api/user
GET /api/user-companies
GET /api/user-employee-companies
GET /api/user/config
GET /api/user/notifications
GET /api/user/notifications/count
GET /api/users
GET /api/users/{userId}
GET /api/users/{userId}/config
GET /api/v2/security/projects/{projectId}
GET /api/warehouses-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}
GET /api/warehouses-room-inventories/{inventoryId}/attachments
GET /api/warehouses-stocks-transfers/{transferId}
GET /api/warehouses-stocks-transfers/{transferId}/stocks
GET /api/warehouses/{warehouseId}/inventories
GET /api/warehouses/{warehouseId}/room-inventories
GET /api/worker-change-requests
GET /public/api/invitations/hash/{hash}
GET /public/api/mapbox/configuration
GET /public/api/otc/{code}
GET /public/api/risks/groups
GET /public/api/risks/{bmpId}
GET /public/api/roles
GET /public/api/units/{unitType}
GET /public/push/phone/{phone}
POST /api/blast-plans/{planId}/actual-blast-time-removal
POST /api/blast-plans/{planId}/cancellation
POST /api/blast-plans/{planId}/change-worker/{employeeId}/roles/{role}
POST /api/blast-plans/{planId}/share-report-file
POST /api/blast-plans/{planId}/undetonated-charge
POST /api/blast-rows/{rowId}/holes-dimensions
POST /api/blast-sets-statistics
POST /api/blast-sets/blast-plans/{planId}
POST /api/blast-sets/{setId}/coordinates
POST /api/blast-sets/{setId}/holes-coordinates
POST /api/blast-sets/{setId}/ignition-plan-attachment
POST /api/bmps/{bmpId}/change-blast-manager/{employeeId}
POST /api/bmps/{bmpId}/default-risks
POST /api/bmps/{bmpId}/notification/contact
POST /api/bmps/{bmpId}/notification/group/{key}/category
POST /api/bmps/{bmpId}/road-lines
POST /api/bmps/{bmpId}/road-lines/invitation
POST /api/bmps/{bmpId}/share-report-file
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/refresh
POST /api/bmps/{bmpId}/vibration-integrations/{integrationType}/project/{integrationProjectId}
POST /api/bmps/{fromBmpId}/notification/contacts/to/{toBmpId}
POST /api/companies/{companyId}/credentials
POST /api/companies/{companyId}/projects/{projectId}/economy-report/prices
POST /api/companies/{companyId}/projects/{projectId}/invitations
POST /api/companies/{orgNo}
POST /api/employees/{employeeId}/sms/resend
POST /api/explosive-warehouses/transfer/all/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/transfer/from/{fromWarehouse}/to/{toWarehouse}
POST /api/explosive-warehouses/{warehouseId}/closure
POST /api/explosive-warehouses/{warehouseId}/share-report
POST /api/explosive-warehouses/{warehouseId}/{articleId}
POST /api/explosives/blast-plans/{planId}/bmp-explosive-materials
POST /api/explosives/blast-plans/{planId}/warehouse-explosive-materials
POST /api/explosives/catalog/{supplier}/extended
POST /api/explosives/catalog/{supplier}/simple
POST /api/mitigations/{mitigationId}
POST /api/notifications/{notificationId}/attachments
POST /api/project-sets-maps
POST /api/risks/{riskId}
POST /api/shipments/{shipmentId}/processing
POST /api/shipments/{shipmentId}/warehouses/{warehouseId}
POST /api/user/data-sharing
POST /api/user/firebase-cloud-messaging-token
POST /api/user/notifications/{notificationId}
POST /api/user/request-removal
POST /api/users/new-version-notification
POST /api/warehouses-inventories/{inventoryId}/share-report
POST /api/warehouses-stocks-transfers/{transferId}/share-document
POST /api/warehouses-stocks-transfers/{transfer}
POST /api/warehouses/{warehouseId}/room-inventories/{inventoryType}
POST /api/worker-change-requests/{requestId}/invitation-response
POST /public/api/invitations/{invitationId}/accept
POST /public/api/invitations/{invitationId}/accept-for-new
POST /public/api/invitations/{invitationId}/decline
POST /public/api/phone/{phone}/otc
POST /public/api/tripletex/companies/{orgNo}
POST /public/api/users
POST /public/uploadcare/webhook
POST /shipment/upload
PUT /api/bmps/{bmpId}/status/{status}
PUT /api/bmps/{bmpId}/warehouse/{withWarehouse}
PUT /api/employees/{employeeId}/status
PUT /api/holes-charges/holes
PUT /api/holes-charges/holes/{holeId}
PUT /api/holes-charges/rows/{rowId}
PUT /api/project-sensors/{sensorId}
PUT /api/projects/{projectId}/hierarchy/rearrange
PUT /api/projects/{projectId}/status/{status}
PUT /api/warehouses-room-inventories/points/{pointId}
PUT /public/api/otc
Severity: info
Fingerprint: 5733ddf49ff49cd1926e27d0926e27d0926e27d0926e27d0926e27d0926e27d0
Public Swagger UI/API detected at path: /webjars/swagger-ui/index.html
Open service 99.83.185.157:80 · api.deton.no
2026-01-10 00:26
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Sat, 10 Jan 2026 00:27:47 GMT
Expires: 0
Location: http://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BaUxhYQBoi44kB54Jq8IIpsXsQklD5lQZJW5%2BhsN2yM%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1768004867"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BaUxhYQBoi44kB54Jq8IIpsXsQklD5lQZJW5%2BhsN2yM%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1768004867"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:443 · api.deton.no
2026-01-09 06:02
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 09 Jan 2026 06:02:06 GMT
Expires: 0
Location: https://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=fZ7EMprfkZCcUxzkIG%2F4hrhhEuhp9pZ9SRruLcCHuiU%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767938526"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=fZ7EMprfkZCcUxzkIG%2F4hrhhEuhp9pZ9SRruLcCHuiU%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767938526"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:80 · api.deton.no
2026-01-02 20:20
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 02 Jan 2026 20:20:43 GMT
Expires: 0
Location: http://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2BJsdI%2F4t4FnGmMWXUl%2FmEI4uqq1lkmDNTqBjjtMab4%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767385243"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2BJsdI%2F4t4FnGmMWXUl%2FmEI4uqq1lkmDNTqBjjtMab4%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767385243"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:443 · api.deton.no
2026-01-02 04:33
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 02 Jan 2026 04:33:53 GMT
Expires: 0
Location: https://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=g8T0WaO8QT95685Z7k%2FV%2BzCdQ6jV3GxorhakLt9EH2o%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1767328433"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=g8T0WaO8QT95685Z7k%2FV%2BzCdQ6jV3GxorhakLt9EH2o%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1767328433"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:80 · api.deton.no
2025-12-23 03:04
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Tue, 23 Dec 2025 03:04:47 GMT
Expires: 0
Location: http://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8B3kZBHCQIfEUZt4lQAzJT4P4giEgXizflGk3fRIPAg%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766459087"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8B3kZBHCQIfEUZt4lQAzJT4P4giEgXizflGk3fRIPAg%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766459087"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:443 · api.deton.no
2025-12-22 10:09
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Mon, 22 Dec 2025 10:09:57 GMT
Expires: 0
Location: https://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=2fh9ep7WhlO1KgQXOYtPaKuovB4lciNrsKQ%2FCvfd0x8%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766398197"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=2fh9ep7WhlO1KgQXOYtPaKuovB4lciNrsKQ%2FCvfd0x8%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766398197"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:80 · api.deton.no
2025-12-21 07:58
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Sun, 21 Dec 2025 07:58:12 GMT
Expires: 0
Location: http://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=l1SCHW2BSxWSZIJ8%2BWxfY5oTiDEQ7NEDhG2TbA0UTOE%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766303893"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=l1SCHW2BSxWSZIJ8%2BWxfY5oTiDEQ7NEDhG2TbA0UTOE%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766303893"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 52.223.53.203:443 · api.deton.no
2025-12-20 07:11
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Sat, 20 Dec 2025 07:11:42 GMT
Expires: 0
Location: https://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=8woj3bQFhkWHzMRFWfd2Zqwz5MS%2F%2FQPAFYchkvjCA5Y%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766214703"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=8woj3bQFhkWHzMRFWfd2Zqwz5MS%2F%2FQPAFYchkvjCA5Y%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766214703"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close
Open service 99.83.185.157:80 · api.deton.no
2025-12-19 09:21
HTTP/1.1 302 Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Language: nb-NO
Content-Length: 0
Date: Fri, 19 Dec 2025 09:21:39 GMT
Expires: 0
Location: http://api.deton.no/swagger
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tQ4feJAtp%2BIYVUk5sLdERYdr04C4VhHgvZuHf8o%2FL60%3D\u0026sid=812dcc77-0bd0-43b1-a5f1-b25750382959\u0026ts=1766136099"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tQ4feJAtp%2BIYVUk5sLdERYdr04C4VhHgvZuHf8o%2FL60%3D&sid=812dcc77-0bd0-43b1-a5f1-b25750382959&ts=1766136099"
Server: Heroku
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 1; mode=block
Connection: close