Get empty all sessions
In order to get all sessions per core instance that were set up for service consumers in parallel via an identical Api-Key, the request MUST be sent with the Api-Key in the HTTP request headers. Here the API remote service is attacked by trying to get all sessions with a random Api-Key.
The errors status: 403 is returned from the remote service together with the errors detail: Unknown Api-Key. in the JSON response body.
Request endpoint
GET SERVER:PORT/api/sessions
                Response status
200
                Request headers
Accept:application/vnd.api+json
Content-Type:application/vnd.api+json
Api-Key:KKKKKKKK-KKKK-KKKK-KKKK-KKKKKKKKKKKK
                Response headers
Transfer-Encoding:chunked
Connection:keep-alive
Accept:application/vnd.api+json
Cache-Control:no-cache
Date:Tue, 19 Mar 2024 12:51:49 GMT
Content-Type:application/vnd.api+json
Server:nginx/1.25.4
                Request body
# intentionally blank
                Response body
{
    "errors": [
        {
            "status": 403,
            "detail": "Unknown Api-Key.",
            "source": {
                "parameter": "id",
                "pointer": ""
            },
            "title": "Session not established"
        }
    ],
    "links": {
        "self": "/api/sessions"
    }
}
                HTTPie example
$ http get SERVER:PORT/api/sessions Accept:application/vnd.api+json Content-Type:application/vnd.api+json Api-Key:KKKKKKKK-KKKK-KKKK-KKKK-KKKKKKKKKKKK