Migrated from Redmine #942 | Author: Jerome Bell
Status: New | Priority: High, I’m very impatient | Created: 2022-10-10
Hi, I get an “Access denied” when trying to get bookings. Please see results below (company and token obfuscated).
POST /admin HTTP/1.1
X-Company-Login: ****
X-Token: ****
x-functions-key:
Content-Type: application/json
User-Agent: PostmanRuntime/7.29.2
Accept: /
Postman-Token: 874b6821-8064-4ca0-b4df-55d1326b2f5b
Host: user-api.simplybook.us
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Content-Length: 88
{
“jsonrpc” : “2.0”,
“id”: 1,
“method” : “getBookings”,
“params” : [
]
}
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 10 Oct 2022 14:47:33 GMT
Content-Type: application/json
Content-Length: 86
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS
Access-Control-Allow-Headers: content-type, x-company-login, x-application-token, x-user-token, x-token, x-requested-with, x-csrf-token
X-XSS-Protection: 1; mode=block
{“error”:{“code”:-32600,“message”:“Access denied”,“data”:},“id”:“1”,“jsonrpc”:“2.0”}