Swagger

When a user logs in via, they receive a signed access token that authorizes subsequent requests to protected routes like creating a monitored endpoint.

Rocket testing the workflow in Swagger UI.

One of the best parts about FastAPI is the interactive documentation out of the box.

Testing the complete cycle takes just a few steps.

Register a new account via 2.

Log in via using the OAuth2 form to retrieve your 3.

Authorize your session in the Swagger UI lock icon using your bearer token 4.

Create a monitored endpoint via, which automatically binds the monitor to your authenticated user account, open folder explore the code and contribute.

And they thought that was interesting and started trying to find potential vulnerabilities in this application.

Through some sleuthing, they found a Swagger API documentation file.

Swagger is a pretty popular format for documenting API endpoints and both request and response parameters around them.

But that file can act as kind of a map of what might be available for a web application.

In that documentation file, they found four different endpoints.