Exercise 11 vulnerable "Users API" not working

Question

The Users API Service seems to be offline. (https://rest.websec.cs.uni-paderborn.de/rest-api-sec/vuln_users returns { "error": "404: Not Found" })

The same happens for the Shop API.

Also when i try to call some endpoints the error: "Invalid Access Token" is returned. Is there something wrong with the service?

This is the curl I used: [redacted]

Response:

{
  "id": "xxxxxx",
  "name": "natasha_romanoff",
  "access_token": "xxxxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
}

When I use the access token in the next request, the API responds with:

{
  "error": "Invalid Access Token"
}

Answer 1

The API is working as intended.

You can solve the problem by looking at the full responses by the server (not only the body).

Answer 2

Hi, I had the same problem when using curl, but e.g. in the chrome developer console it was working with the access token.