Heroku
tcp/443 tcp/80
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacb1941ec5f
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /settings/{category}/{sectionName}
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacb81c6b8b7
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/compare/{versionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /settings/{category}/{sectionName}
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacbbc68952b
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /settings/{category}/{sectionName}
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacb4fce3b03
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /settings/{category}/{sectionName}
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Exposing Swagger/OpenAPI documentation is primarily a risk if your API has underlying security flaws, as it gives attackers a precise roadmap to find them.
Those detail every endpoint, parameter, and data model, making it easier to discover and exploit vulnerabilities like broken access control or injection points.
While a perfectly secure API mitigates the danger, protecting your documentation is a critical layer of defense that forces attackers to work without a map.
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacb1941ec5f
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /settings/{category}/{sectionName}
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacb81c6b8b7
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/compare/{versionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /settings/{category}/{sectionName}
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacbbc68952b
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /settings/{category}/{sectionName}
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Severity: info
Fingerprint: 5733ddf49ff49cd151e75e4b6fbd0de7387ba3c7c29d732eeaa3eacb4fce3b03
Public Swagger UI/API detected at path: /v3/api-docs - sample paths:
DELETE /document/{documentId}/user/{documentUserId}
DELETE /template/{id}/merge-data
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/image/{imageId}
DELETE /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{ids}
DELETE /template/{templateId}/datasource/{datasourceId}
GET /customer/{customerId}/connected-app/{connectedAppId}/assets
GET /customer/{customerId}/connected-app/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/data/{objectApiName}
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/dataelements
GET /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships
GET /customer/{customerId}/connectedapplications
GET /customer/{customerId}/objects/{objectId}/relationships/{relationshipId}/fields
GET /customer/{customerId}/objects/{objectId}/schema
GET /customer/{id}/datasource
GET /customer/{id}/templates
GET /dataElements/{dataElementId}/options
GET /datasource/{id}/refreshtime
GET /datasource/{id}/{objName}
GET /document-user/{documentId}/user/{userId}
GET /document/{documentId}/comments
GET /document/{documentId}/fieldConfig
GET /document/{documentId}/fieldConfig/{id}
GET /document/{documentId}/merge-data
GET /document/{documentId}/related-list/{relatedListId}
GET /document/{documentId}/section
GET /document/{documentId}/section/{documentSectionId}
GET /document/{documentId}/section/{documentSectionId}/contentBlock
GET /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}
GET /document/{documentId}/users
GET /document/{documentId}/version
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}
GET /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment/{commentId}
GET /documents
GET /documents/all
GET /documents/customer/{customerId}
GET /documents/documentCards
GET /documents/file/{fileId}
GET /documents/generate/init
GET /documents/hub/{hubId}
GET /documents/invitedDocument/{id}
GET /documents/poll
GET /documents/template/{templateId}
GET /documents/{documentId}/generate/pdf
GET /documents/{documentId}/{functionality}/{domain}/validate-access
GET /documents/{hubId}/{objectId}/{templateId}
GET /documents/{id}
GET /documents/{id}/inputfields
GET /file
GET /settings/app
GET /settings/usage-statistics
GET /settings/variables
GET /settings/{category}
GET /template
GET /template/workFlow
GET /template/{id}
GET /template/{id}/datasource
GET /template/{id}/datasource/{dataSourceId}/elements/{objName}
GET /template/{id}/datasource/{dataSourceId}/type
GET /template/{id}/datasources/type
GET /template/{id}/elements/{objName}
GET /template/{id}/section/{sectionId}/content-block/{blockId}
GET /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data
GET /template/{id}/section/{sectionId}/content-block/{blockId}/{fieldKey}/merge-data
GET /template/{id}/section/{sectionId}/content-blocks
GET /template/{id}/section/{sectionId}/related-list
GET /template/{templateId}/accessible-profile
GET /template/{templateId}/fieldConfig
GET /template/{templateId}/fieldConfig/{id}
GET /template/{templateId}/inputfields
GET /template/{templateId}/merge-data
GET /template/{templateId}/preview
GET /template/{templateId}/profile
GET /template/{templateId}/profile/{profileId}
GET /template/{templateId}/relations
GET /template/{templateId}/section
GET /template/{templateId}/section/{sectionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/block-action/{blockActionId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}
GET /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail/{ruleDetailId}
GET /v1/template/{id}/datasources/type
PATCH /customer/{customerId}/connected-app/{connectedAppId}/data/migrate
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/status
PATCH /customer/{customerId}/connected-app/{connectedAppId}/objects/{objectId}/relationships/{relationshipId}/fields/refresh
PATCH /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/refresh
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/object/{apiName}/element
PATCH /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationships/{data_source_rel_id}
PATCH /customer/{customerId}/fields/status
PATCH /customer/{customerId}/objects/status
PATCH /document/{documentId}/section/{documentSectionId}/contentBlock/{documentContentBlockId}/refresh
PATCH /document/{documentId}/version/{versionId}
PATCH /documentUser/{documentId}/user/{userId}
PATCH /documents/lock/{documentId}
PATCH /documents/{id}/inputfields/all
PATCH /documents/{id}/refresh
PATCH /documents/{id}/restore
PATCH /template/{id}/section/{sectionId}/content-block/{blockId}/merge-data/{mergeId}
PATCH /template/{templateId}/profiles
POST /customer/{customerId}/connected-app/{connectedAppId}/objects/schema
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects
POST /customer/{customerId}/connected-app/{connectedAppId}/settings/objects/{objectId}/schema
POST /customer/{customerId}/connectedapplication/{connectedAppId}/datasource
POST /customer/{customerId}/connectedapplication/{connectedAppId}/objects/{apiName}/relationship
POST /customer/{customerId}/connectedapplication/{connectedAppId}/refresh
POST /customer/{customerId}/master-setup
POST /datasource/{dataSourceId}/elements
POST /document/{documentId}/user
POST /document/{documentId}/version/{versionId}/section/{sectionId}/contentBlock/{contentBlockId}/comment
POST /documents/generateDocument
POST /documents/{documentId}/retry
POST /settings/{category}/{sectionName}
POST /template/cloneTemplateToNewUser/{newCustomerId}/{existingCustomerId}/{newUserId}
POST /template/{id}/datasource/{dataSourceId}/elements
POST /template/{id}/section
POST /template/{id}/section/{sectionId}/content-block
POST /template/{id}/section/{sectionId}/content-block/{blockId}/image
POST /template/{templateId}/clone
POST /template/{templateId}/publish
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule
POST /template/{templateId}/section/{sectionId}/content-block/{blockId}/render-rule/{ruleId}/rule-detail
POST /upload-file
Open service 75.2.60.68:443 · picasso.api.dev.sdocs.com
2026-01-09 17:06
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 17:06:23 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=%2BmiQWWgygcVa0S1oPy3tGfh5EhoUlm3VDjB3lU%2Fqrkg%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767978383"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=%2BmiQWWgygcVa0S1oPy3tGfh5EhoUlm3VDjB3lU%2Fqrkg%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767978383"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2026-01-09T17:06:23.048466794Z","message":"{\"timeStamp\":\"2026-01-09T17:06:23.045788337Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 99.83.220.108:80 · picasso.api.dev.sdocs.com
2026-01-09 16:03
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 09 Jan 2026 16:04:37 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=JxXBPen0UfZaaqw2MqL0JP6QNBz1peIIzj6KIAdLwpM%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767974677"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=JxXBPen0UfZaaqw2MqL0JP6QNBz1peIIzj6KIAdLwpM%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767974677"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2026-01-09T16:04:37.883871056Z","message":"{\"timeStamp\":\"2026-01-09T16:04:37.880041954Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 99.83.220.108:80 · picasso.api.dev.sdocs.com
2026-01-02 22:18
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 22:19:02 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=4UShv4s9mj%2Bw37J3KrR0AMpOcNpZ1JW2sNOp4YQyRXc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767392342"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=4UShv4s9mj%2Bw37J3KrR0AMpOcNpZ1JW2sNOp4YQyRXc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767392342"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2026-01-02T22:19:02.757453559Z","message":"{\"timeStamp\":\"2026-01-02T22:19:02.754759007Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 75.2.60.68:443 · picasso.api.dev.sdocs.com
2026-01-02 20:32
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 02 Jan 2026 20:32:38 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=tjyjVViM2bSShBsxtB3zu4RpcR%2FCsn5BUjStymtTQ24%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1767385958"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=tjyjVViM2bSShBsxtB3zu4RpcR%2FCsn5BUjStymtTQ24%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1767385958"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2026-01-02T20:32:38.932181258Z","message":"{\"timeStamp\":\"2026-01-02T20:32:38.929800075Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 99.83.220.108:80 · picasso.api.dev.sdocs.com
2025-12-23 04:34
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Tue, 23 Dec 2025 04:34:19 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Hv9ZLpVpaJ1Glr9CXtD6Miq3U2TK4BHtaUvRazr2WYU%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766464459"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Hv9ZLpVpaJ1Glr9CXtD6Miq3U2TK4BHtaUvRazr2WYU%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766464459"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2025-12-23T04:34:19.738072834Z","message":"{\"timeStamp\":\"2025-12-23T04:34:19.733816203Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 75.2.60.68:443 · picasso.api.dev.sdocs.com
2025-12-22 17:31
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Mon, 22 Dec 2025 17:31:52 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=g%2BEeQsv%2Fgzd4qd9NfXUBAsRcHirXqKg0zmEtg8Yaxjc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766424712"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=g%2BEeQsv%2Fgzd4qd9NfXUBAsRcHirXqKg0zmEtg8Yaxjc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766424712"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2025-12-22T17:31:52.580776681Z","message":"{\"timeStamp\":\"2025-12-22T17:31:52.578470441Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 99.83.220.108:80 · picasso.api.dev.sdocs.com
2025-12-21 02:22
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sun, 21 Dec 2025 02:22:17 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=Z387XayeovzmofrQ4uVfYBaJ1mTfMh0dpY%2Fzht7ocDk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766283737"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=Z387XayeovzmofrQ4uVfYBaJ1mTfMh0dpY%2Fzht7ocDk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766283737"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2025-12-21T02:22:17.576828023Z","message":"{\"timeStamp\":\"2025-12-21T02:22:17.573766738Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 75.2.60.68:443 · picasso.api.dev.sdocs.com
2025-12-20 16:05
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Sat, 20 Dec 2025 16:05:20 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=pLtHTHVvRAGP75z0L0kD3hFDKnJC3Pi1h547Ii%2FnCHc%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766246721"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=pLtHTHVvRAGP75z0L0kD3hFDKnJC3Pi1h547Ii%2FnCHc%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766246721"
Server: Heroku
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2025-12-20T16:05:21.122870227Z","message":"{\"timeStamp\":\"2025-12-20T16:05:21.119300122Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}
Open service 99.83.220.108:80 · picasso.api.dev.sdocs.com
2025-12-19 01:36
HTTP/1.1 401 Unauthorized
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: Content-Type, Authorization
Access-Control-Allow-Methods: GET, POST, PATCH, PUT, DELETE, OPTIONS
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: application/json
Date: Fri, 19 Dec 2025 01:36:31 GMT
Expires: 0
Nel: {"report_to":"heroku-nel","response_headers":["Via"],"max_age":3600,"success_fraction":0.01,"failure_fraction":0.1}
Pragma: no-cache
Report-To: {"group":"heroku-nel","endpoints":[{"url":"https://nel.heroku.com/reports?s=mpNyvX6HDcX41bE2Of97PhdXJx2UUgjhKSo8Xf68HBk%3D\u0026sid=1b10b0ff-8a76-4548-befa-353fc6c6c045\u0026ts=1766108191"}],"max_age":3600}
Reporting-Endpoints: heroku-nel="https://nel.heroku.com/reports?s=mpNyvX6HDcX41bE2Of97PhdXJx2UUgjhKSo8Xf68HBk%3D&sid=1b10b0ff-8a76-4548-befa-353fc6c6c045&ts=1766108191"
Server: Heroku
Via: 1.1 heroku-router
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
X-Xss-Protection: 0
Content-Length: 220
Connection: close
{"timeStamp":"2025-12-19T01:36:31.648210250Z","message":"{\"timeStamp\":\"2025-12-19T01:36:31.646121727Z\",\"message\":\"Authentication token is missing.\",\"details\":\"uri=/login-user/details\"}","description":"uri=/"}