Test Id
Test 3762
Test Trace Id
0435ba41-353d-4c6d-9448-e9b9b6e2b08f
Timestamp
Tue, 23 Jun 2026 21:32:55 GMT
Scenario
Send a 'happy' flow request with all fields and all headers and checks if the response headers match those declared in the contract
Expected Result
Should return 2XX
Result
Result Details
The following keywords were detected in the response which might suggest an error details leak: [forbidden]
Contract Path
Fuzzer
ResponseHeadersMatchContractHeaders
Full Request Path
Http Method
{
"severity": "HIGH",
"protocol": "UDP",
"sourceIp": "194.209.17.30",
"size": 20,
"from": "2026-06-23T21:31:10.004547973Z",
"sortBy": "timestamp",
"to": "2026-06-23T21:31:10.004711556Z",
"page": 0,
"deviceId": "LSACEB",
"direction": "asc"
}
[
{
"key": "Accept",
"value": "application/json"
},
{
"key": "Content-Type",
"value": "application/json"
},
{
"key": "User-Agent",
"value": "cats/13.8.1-SNAPSHOT (Test 3762 - ResponseHeadersMatchContractHeaders)"
},
{
"key": "X-Cats-Trace-Id",
"value": "0435ba41-353d-4c6d-9448-e9b9b6e2b08f"
}
]
curl -X GET \
-H "Accept: application/json" \
-H "Content-Type: application/json" \
-H "User-Agent: cats/13.8.1-SNAPSHOT (Test 3762 - ResponseHeadersMatchContractHeaders)" \
-H "X-Cats-Trace-Id: 0435ba41-353d-4c6d-9448-e9b9b6e2b08f" \
\
\
https://qa-api.puk3p.online/api/alerts?severity=HIGH&protocol=UDP&sourceIp=194.209.17.30&size=20&from=2026-06-23T21%3A31%3A10.004547973Z&sortBy=timestamp&to=2026-06-23T21%3A31%3A10.004711556Z&page=0&deviceId=LSACEB&direction=asc
{
"responseCode": 403,
"httpMethod": "GET",
"responseTimeInMs": "127",
"numberOfWordsInResponse": "1",
"numberOfLinesInResponse": "1",
"contentLengthInBytes": "94",
"jsonBody": {
"timestamp": "2026-06-23T21:32:55.249Z",
"status": 403,
"error": "Forbidden",
"path": "/api/alerts"
},
"headers": [
{
"key": "cache-control",
"value": "no-cache, no-store, max-age=0, must-revalidate"
},
{
"key": "content-type",
"value": "application/json"
},
{
"key": "date",
"value": "Tue, 23 Jun 2026 21:32:55 GMT"
},
{
"key": "expires",
"value": "0"
},
{
"key": "pragma",
"value": "no-cache"
},
{
"key": "server",
"value": "nginx/1.24.0 (Ubuntu)"
},
{
"key": "strict-transport-security",
"value": "max-age=31536000 ; includeSubDomains"
},
{
"key": "vary",
"value": "Origin"
},
{
"key": "x-content-type-options",
"value": "nosniff"
},
{
"key": "x-frame-options",
"value": "DENY"
},
{
"key": "x-xss-protection",
"value": "0"
}
],
"responseContentType": "application/json"
}
cats replay Test3762