Error 401 Unauthorized

GET https://nw-flow.cloud/api/config

IP
5.50.56.159
Profiled on
Token
ad386b

Request / Response

Request

GET Parameters

None

POST Parameters

None

Uploaded Files

None

Request Attributes

Key Value
_api_call_log_data 
[
  "method" => "GET"
  "path" => "/api/config"
  "statusCode" => 401
  "callerType" => App\Enum\ApiCallerType {#1215
    +name: "ANONYMOUS"
    +value: "anonymous"
  }
  "userId" => null
  "deviceId" => null
  "clientId" => null
  "scopes" => null
  "ipAddress" => "5.50.56.159"
  "userAgent" => "ktor-client"
  "requestBody" => null
  "responseBody" => "{"error":"unauthorized","message":"The resource owner or authorization server denied the request."}"
  "durationMs" => 61
]
_controller 
"App\Api\Controller\ConfigController::getConfig"
_firewall_context 
"security.firewall.map.context.api"
_route 
"app_api_config_getconfig"
_route_params 
[]
_stopwatch_token 
"2fb5f6"

Request Headers

Header Value
accept 
"application/json"
accept-encoding 
"gzip"
authorization 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI1OWQ5ZmUwOGRkZGJjOTE2IiwianRpIjoiZDY2YWI3M2M0MDFhOWUzNzc1YjU0MjBlYzgwMDIzMzViODYxMTY1MjA0YzlkNWYyYjNiZjQ0NGNmYWIxOWI2OTY5MjdlY2ZlNzA3MjFhZDkiLCJpYXQiOjE3ODkwODY3MjkuNTg2MTY3LCJuYmYiOjE3ODkwODY3MjkuNTg2MTczLCJleHAiOjE3ODkwODc2MjkuNTc4MDk4LCJzdWIiOiI1OWQ5ZmUwOGRkZGJjOTE2Iiwic2NvcGVzIjpbImRldmljZTpydW50aW1lIl19.gOThkedVZbSFYsAMgTlxXknrboKtRT8tOY9LKvHRmXJrnAg97E2hXuEorO3qO6r8wKrBpLb9rSucDIE1zKO--oaotIz2jxJC6wVcWK_-BmRSJaQKoYe9C0o4-gRzq7WPpzzvKJPGA4JSmpEkDZR-5gjm-pCAHerQu1fXePvkP2BAdzydkq5ME9IlUyloaRA28k6Q0nXMQhwhRhzMbbGGg6U3p-dOe47C68DoxtSdfImEfF7Y0uGrnkA-7KYFUdIYQ5hVe-UbcB4AppXStzCiSgv1z6lGlhNR9_o7ALjDDTyhKWP-4mav9BPBrgkqxa0n89p39UvkVUYFNMQjPphLIg"
host 
"nw-flow.cloud"
user-agent 
"ktor-client"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Retry Command

curl \
  --compressed \
  --url 'https://nw-flow.cloud/api/config' \
  --header 'Authorization: Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI1OWQ5ZmUwOGRkZGJjOTE2IiwianRpIjoiZDY2YWI3M2M0MDFhOWUzNzc1YjU0MjBlYzgwMDIzMzViODYxMTY1MjA0YzlkNWYyYjNiZjQ0NGNmYWIxOWI2OTY5MjdlY2ZlNzA3MjFhZDkiLCJpYXQiOjE3ODkwODY3MjkuNTg2MTY3LCJuYmYiOjE3ODkwODY3MjkuNTg2MTczLCJleHAiOjE3ODkwODc2MjkuNTc4MDk4LCJzdWIiOiI1OWQ5ZmUwOGRkZGJjOTE2Iiwic2NvcGVzIjpbImRldmljZTpydW50aW1lIl19.gOThkedVZbSFYsAMgTlxXknrboKtRT8tOY9LKvHRmXJrnAg97E2hXuEorO3qO6r8wKrBpLb9rSucDIE1zKO--oaotIz2jxJC6wVcWK_-BmRSJaQKoYe9C0o4-gRzq7WPpzzvKJPGA4JSmpEkDZR-5gjm-pCAHerQu1fXePvkP2BAdzydkq5ME9IlUyloaRA28k6Q0nXMQhwhRhzMbbGGg6U3p-dOe47C68DoxtSdfImEfF7Y0uGrnkA-7KYFUdIYQ5hVe-UbcB4AppXStzCiSgv1z6lGlhNR9_o7ALjDDTyhKWP-4mav9BPBrgkqxa0n89p39UvkVUYFNMQjPphLIg' \
  --header 'Accept: application/json' \
  --header 'User-Agent: ktor-client' \
  --header 'Accept-Encoding: gzip' \
  --header 'X-Php-Ob-Level: 1'

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"application/json"
date 
"Fri, 11 Sep 2026 01:07:08 GMT"
permissions-policy 
"camera=(), microphone=(), geolocation=()"
referrer-policy 
"strict-origin-when-cross-origin"
vary 
"Accept-Language"
x-content-type-options 
"nosniff"
x-debug-token 
"ad386b"
x-frame-options 
"DENY"
x-robots-tag 
"noindex"
x-xss-protection 
"0"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
ACCOUNT_LOCKOUT_DURATION 
"900"
ACCOUNT_LOCKOUT_THRESHOLD 
"5"
AGE_MIN 
"26"
AGE_VERIFICATION_REQUIRED 
"false"
AGE_VERIFICATION_TTL 
"900"
API_CALL_LOG_ENABLED 
"true"
APP_SECRET 
"33b1df71599bdd162645e641ae741a10"
APP_SHARE_DIR 
"var/share"
CORS_ALLOW_ORIGIN 
"^https?://(localhost|127\.0\.0\.1)(:[0-9]+)?$"
EMAIL_VERIFICATION_TTL 
"86400"
FIREBASE_CREDENTIALS 
"/app/config/firebase/neow.json"
JWT_PASSPHRASE 
"f13c90c3c37d9982d9b90785020246638afb30ed5928df19d6882c1af6e3448b"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
JWT_TOKEN_TTL 
"900"
LOCATION_REQUEST_TTL 
"300"
MAILER_DSN 
"smtp://Neow%20Flow:md-f2npYQTwJJp6Mc5LpmYB6A@smtp.mandrillapp.com:587"
MAILER_FROM 
"flow@neow-kids.com"
MFA_CODE_TTL 
"600"
MFA_MAX_ATTEMPTS 
"3"
MFA_RESEND_COOLDOWN 
"60"
OAUTH_ACCESS_TOKEN_TTL 
"900"
OAUTH_ENCRYPTION_KEY 
"def00000aef5ee1e0c8c881a739b35960dd3992587c190e459b3b576b4a642cb0e999c97e0f66638623993e8d81c149091344338002c0825411232aaea7c769071231fcd"
OAUTH_REFRESH_TOKEN_TTL 
"604800"
PAIRING_CODE_TTL 
"300"
SERPAPI_BURST_LIMIT 
"10000"
SERPAPI_KEY 
"ff3bb4bcd2dd104b9bdc753ad80d89b0c839b48e063ff7a16479e80d7381363d"
SERPAPI_RATE_AMOUNT 
"2"
SERPAPI_RATE_INTERVAL 
"1 second"
YOTI_API_KEY 
"DhQkDKTqnJDQdXU7xsnXyAo3IMwLbckp6QUHp8nnRf_ETI36LyuNNQr7u90="
YOTI_AVS_API_URL 
"https://age.yoti.com/api/v1"
YOTI_CALLBACK_URL 
"neow://yoti/callback"
YOTI_CLIENT_SDK_ID 
"37b70c3d-34fc-45d9-b881-a8efd8931dc6"
YOTI_DOC_SCAN_API_URL 
"https://api.yoti.com/idverify/v1"
YOTI_KEY_FILE_PATH 
"%kernel.project_dir%/config/yoti/NeowMobileApp-access-security.pem"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_ENV 
"dev"
APP_PROJECT_DIR 
"/app"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/app"
]
AUTH_TYPE 
""
COMPOSER_ALLOW_SUPERUSER 
"1"
CONTENT_LENGTH 
""
CONTENT_TYPE 
""
DATABASE_URL 
"postgresql://app:!ChangeMe!@database:5432/app?serverVersion=16&charset=utf8"
DEFAULT_URI 
"https://nw-flow.cloud"
DOCUMENT_ROOT 
"/app/public"
DOCUMENT_URI 
"index.php"
FRANKENPHP_HOT_RELOAD 
"/.well-known/mercure?topic=https%3A%2F%2Ffrankenphp.dev%2Fhot-reload%2F4a8e8f07a5e44839"
FRANKENPHP_SITE_CONFIG 
"hot_reload"
FRANKENPHP_WORKER_CONFIG 
"watch"
GATEWAY_INTERFACE 
"CGI/1.1"
GODEBUG 
"cgocheck=0"
GPG_KEYS 
"1198C0117593497A5EC5C199286AF1F9897469DC 49D9AF6BC72A80D6691719C8AA23F5BE9C7097D4 D95C03BC702BE9515344AE3374E44BC9067701A5"
HOME 
"/root"
HOSTNAME 
"577d161ec860"
HTTPS 
"on"
HTTP_ACCEPT 
"application/json"
HTTP_ACCEPT_ENCODING 
"gzip"
HTTP_AUTHORIZATION 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiI1OWQ5ZmUwOGRkZGJjOTE2IiwianRpIjoiZDY2YWI3M2M0MDFhOWUzNzc1YjU0MjBlYzgwMDIzMzViODYxMTY1MjA0YzlkNWYyYjNiZjQ0NGNmYWIxOWI2OTY5MjdlY2ZlNzA3MjFhZDkiLCJpYXQiOjE3ODkwODY3MjkuNTg2MTY3LCJuYmYiOjE3ODkwODY3MjkuNTg2MTczLCJleHAiOjE3ODkwODc2MjkuNTc4MDk4LCJzdWIiOiI1OWQ5ZmUwOGRkZGJjOTE2Iiwic2NvcGVzIjpbImRldmljZTpydW50aW1lIl19.gOThkedVZbSFYsAMgTlxXknrboKtRT8tOY9LKvHRmXJrnAg97E2hXuEorO3qO6r8wKrBpLb9rSucDIE1zKO--oaotIz2jxJC6wVcWK_-BmRSJaQKoYe9C0o4-gRzq7WPpzzvKJPGA4JSmpEkDZR-5gjm-pCAHerQu1fXePvkP2BAdzydkq5ME9IlUyloaRA28k6Q0nXMQhwhRhzMbbGGg6U3p-dOe47C68DoxtSdfImEfF7Y0uGrnkA-7KYFUdIYQ5hVe-UbcB4AppXStzCiSgv1z6lGlhNR9_o7ALjDDTyhKWP-4mav9BPBrgkqxa0n89p39UvkVUYFNMQjPphLIg"
HTTP_HOST 
"nw-flow.cloud"
HTTP_USER_AGENT 
"ktor-client"
MERCURE_EXTRA_DIRECTIVES 
"demo"
MERCURE_JWT_SECRET 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_PUBLIC_URL 
"https://localhost:443/.well-known/mercure"
MERCURE_PUBLISHER_JWT_KEY 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_SUBSCRIBER_JWT_KEY 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_URL 
"http://php/.well-known/mercure"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PATH_INFO 
""
PHPIZE_DEPS 
"autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c"
PHP_ASC_URL 
"https://www.php.net/distributions/php-8.5.9.tar.xz.asc"
PHP_CFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_CPPFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_INI_DIR 
"/usr/local/etc/php"
PHP_INI_SCAN_DIR 
":/usr/local/etc/php/app.conf.d"
PHP_LDFLAGS 
"-Wl,-O1 -pie"
PHP_SELF 
"/index.php"
PHP_SHA256 
"0db7855f25bcd0ab1d592cdb35e284d6f6a5d2ae0f6f621122e364cc39b708f4"
PHP_URL 
"https://www.php.net/distributions/php-8.5.9.tar.xz"
PHP_VERSION 
"8.5.9"
PWD 
"/app"
QUERY_STRING 
""
REMOTE_ADDR 
"5.50.56.159"
REMOTE_HOST 
"5.50.56.159"
REMOTE_IDENT 
""
REMOTE_PORT 
"38588"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1789088828
REQUEST_TIME_FLOAT 
1789088828.5506
REQUEST_URI 
"/api/config"
SCRIPT_FILENAME 
"/app/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_NAME 
"nw-flow.cloud"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/2.0"
SERVER_SOFTWARE 
"FrankenPHP"
SSL_CIPHER 
"TLS_AES_128_GCM_SHA256"
SSL_PROTOCOL 
"TLSv1.3"
SYMFONY_DOTENV_PATH 
"/app/.env"
SYMFONY_DOTENV_VARS 
"APP_SECRET,APP_SHARE_DIR,CORS_ALLOW_ORIGIN,MAILER_DSN,MAILER_FROM,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,JWT_TOKEN_TTL,ACCOUNT_LOCKOUT_THRESHOLD,ACCOUNT_LOCKOUT_DURATION,EMAIL_VERIFICATION_TTL,PAIRING_CODE_TTL,MFA_CODE_TTL,MFA_MAX_ATTEMPTS,MFA_RESEND_COOLDOWN,API_CALL_LOG_ENABLED,FIREBASE_CREDENTIALS,LOCATION_REQUEST_TTL,SERPAPI_KEY,SERPAPI_BURST_LIMIT,SERPAPI_RATE_INTERVAL,SERPAPI_RATE_AMOUNT,OAUTH_ACCESS_TOKEN_TTL,OAUTH_REFRESH_TOKEN_TTL,OAUTH_ENCRYPTION_KEY,YOTI_CLIENT_SDK_ID,YOTI_API_KEY,YOTI_AVS_API_URL,YOTI_CALLBACK_URL,AGE_MIN,AGE_VERIFICATION_TTL,AGE_VERIFICATION_REQUIRED,YOTI_KEY_FILE_PATH,YOTI_DOC_SCAN_API_URL"
TERM 
"xterm"
TLS_DIRECTIVE 
""
XDEBUG_MODE 
"develop"
XDG_CONFIG_HOME 
"/config"
XDG_DATA_HOME 
"/data"