Fetch Data

API	Description
POST /api/fetchTestRunResultsCount	Fetch the count of test run results, useful for pagination or summaries.
POST /api/fetchSeverityInfoForIssues	Retrieve aggregated severity information (Critical, High, Medium, Low) for issues.
POST /api/fetchIssueFromTestRunResultDetails	Get detailed issue information from a specific test run result.
POST /api/fetchAllSubCategories	Fetch all issue subcategories (e.g., SQLi, XSS under Injection) used for classification.
POST /api/fetchRemediationInfo	Retrieve remediation details and best practices for fixing a specific issue.
POST /api/fetchTestRunResultDetails	Get detailed information about a specific test run result.
POST /api/findTotalIssuesByDay	Fetch the total number of issues discovered per day, useful for trend analysis.
POST /api/fetchAllIssues	Retrieve all issues detected across collections and test runs.
POST /api/fetchIssuesFromCollections	Retrieve issues by API collection names with enriched test details and direct issue URLs.
POST /api/fetchTestingRunResultSummaries	Fetch summaries of testing run results (high-level overview of findings).
POST /api/generateReportPDF	Generate a downloadable PDF report of test results and issues.
POST /api/fetchFilterYamlTemplate	Retrieve the YAML template for issue filters, used for customizing reports or queries.
POST /api/fetchTestingRunResults	Fetch detailed testing run results including all issues found.
POST /api/fetchActiveTestRunsStatus	Retrieve the current status of active test runs.
POST /api/fetchTestResultsStatsCount	Get statistical counts of test results grouped by categories (e.g., pass/fail).
POST /api/fetchTestingRunResult	Fetch a single testing run result with its details.
POST /api/fetchVulnerableTestingRunResultsFromIssues	Retrieve test run results linked to vulnerable issues.
POST /api/getAllTestsCountMap	Get a count map of all available tests grouped by categories/subcategories.
POST /api/retrieveAllCollectionTests	Retrieve all tests mapped to API collections.
POST /api/fetchTestingRunResultsSummary	Fetch a summary of testing run results, highlighting major findings.
POST /api/fetchIssuesByApis	Get all issues grouped by APIs for better endpoint-level visibility.
POST /api/fetchIssuesFromResultIds	Fetch issues associated with specific test run result IDs.
POST /api/fetchCriticalIssuesTrend	Retrieve the trend of critical issues over time.
POST /api/fetchTestCoverageData	Fetch test coverage data showing which APIs/endpoints have been tested and which remain untested.

POST request for endpoint /api/fetchIssueFromTestRunResultDetails

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

testingRunResultHexIdstringOptionalExample: 6464783658e3a17b14ddfa67

Responses

200

description

application/json

Sample description

metadatastringOptionalExample: null

testingRunResultsstringOptionalExample: null

testingRunResultSummariesstringOptionalExample: null

selectedTestsstringOptionalExample: null

maxConcurrentRequestsinteger · int32OptionalExample: 0

testingRunsstringOptionalExample: null

recurringDailybooleanOptionalExample: false

workflowTeststringOptionalExample: null

authMechanismstringOptionalExample: null

testingRunResultstringOptionalExample: null

fetchCicdbooleanOptionalExample: false

testingRunstringOptionalExample: null

testRunTimeinteger · int32OptionalExample: 0

testingRunHexIdstringOptionalExample: null

endTimestampinteger · int32OptionalExample: 0

startTimestampinteger · int32OptionalExample: 0

testNamestringOptionalExample: null

post

/api/fetchIssueFromTestRunResultDetails

HTTPcURLJavaScriptPython

POST /api/fetchIssueFromTestRunResultDetails HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 52

{
  "testingRunResultHexId": "6464783658e3a17b14ddfa67"
}

200

description

{
  "metadata": "null",
  "testingRunResults": "null",
  "testingRunResultSummaries": "null",
  "runIssues": {
    "severity": "HIGH",
    "lastSeen": 1684305974,
    "creationTime": 1684305974,
    "testRunIssueStatus": "OPEN",
    "ignoreReason": "null",
    "latestTestingRunSummaryId": {
      "date": "2023-05-17T12:16:08",
      "timestamp": 1684305968
    },
    "id": {
      "testSubCategory": "CHANGE_METHOD_TO_DELETE",
      "testErrorSource": "AUTOMATED_TESTING",
      "testCategoryFromSourceConfig": "null",
      "apiInfoKey": {
        "method": "GET",
        "apiCollectionId": 1679459648,
        "url": "https://juiceshop.akto.io/"
      },
      "testSourceConfig": "null"
    }
  },
  "selectedTests": "null",
  "maxConcurrentRequests": 0,
  "testingRuns": "null",
  "recurringDaily": false,
  "workflowTest": "null",
  "authMechanism": "null",
  "testingRunResult": "null",
  "fetchCicd": false,
  "testingRun": "null",
  "testRunTime": 0,
  "testingRunHexId": "null",
  "endTimestamp": 0,
  "startTimestamp": 0,
  "testName": "null"
}

POST request for endpoint /api/fetchAllSubCategories

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

objectOptional

Sample description

Responses

200

description

application/json

objectOptional

AKTO_ERROR while building schema

post

/api/fetchAllSubCategories

HTTPcURLJavaScriptPython

POST /api/fetchAllSubCategories HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 2

{}

200

description

{}

POST request for endpoint /api/fetchTestRunResultDetails

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

testingRunResultHexIdstringOptionalExample: 6464783658e3a17b14ddfa67

Responses

200

description

application/json

Sample description

metadatastringOptionalExample: null

testingRunResultsstringOptionalExample: null

testingRunResultSummariesstringOptionalExample: null

runIssuesstringOptionalExample: null

selectedTestsstringOptionalExample: null

maxConcurrentRequestsinteger · int32OptionalExample: 0

testingRunsstringOptionalExample: null

recurringDailybooleanOptionalExample: false

workflowTeststringOptionalExample: null

authMechanismstringOptionalExample: null

fetchCicdbooleanOptionalExample: false

testingRunstringOptionalExample: null

testRunTimeinteger · int32OptionalExample: 0

testingRunHexIdstringOptionalExample: null

endTimestampinteger · int32OptionalExample: 0

startTimestampinteger · int32OptionalExample: 0

testNamestringOptionalExample: null

post

/api/fetchTestRunResultDetails

HTTPcURLJavaScriptPython

POST /api/fetchTestRunResultDetails HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 52

{
  "testingRunResultHexId": "6464783658e3a17b14ddfa67"
}

200

description

{
  "metadata": "null",
  "testingRunResults": "null",
  "testingRunResultSummaries": "null",
  "runIssues": "null",
  "selectedTests": "null",
  "maxConcurrentRequests": 0,
  "testingRuns": "null",
  "recurringDaily": false,
  "workflowTest": "null",
  "testingRunResult": {
    "testResults": [
      {
        "testInfo": "null",
        "vulnerable": true,
        "percentageMatch": 100,
        "confidence": {
          "_name": "HIGH"
        },
        "message": "{\"request\": {\"url\": \"https://juiceshop.akto.io/\", \"method\": \"DELETE\", \"type\": \"HTTP/1.1\", \"queryParams\": null, \"body\": \"\", \"headers\": \"{\\\"sec-fetch-mode\\\":\\\"navigate\\\",\\\"sec-fetch-site\\\":\\\"none\\\",\\\"cookie\\\":\\\"language=en; welcomebanner_status=dismiss; cookieconsent_status=dismiss; continueCode=v7BmaPZbQ7NroLqvm1YzMVnwOBAVkTefndgpE5jkJlXey43R68K2D9xWNQgq\\\",\\\"accept-language\\\":\\\"en-GB,en-US;q=0.9,en;q=0.8\\\",\\\"sec-fetch-user\\\":\\\"?1\\\",\\\"x-akto-ignore\\\":\\\"0\\\",\\\"accept\\\":\\\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\\\",\\\"sec-ch-ua\\\":\\\"\\\\\\\"Not A(Brand\\\\\\\";v=\\\\\\\"24\\\\\\\", \\\\\\\"Chromium\\\\\\\";v=\\\\\\\"110\\\\\\\"\\\",\\\"sec-ch-ua-mobile\\\":\\\"?0\\\",\\\"sec-ch-ua-platform\\\":\\\"\\\\\\\"macOS\\\\\\\"\\\",\\\"host\\\":\\\"juiceshop.akto.io\\\",\\\"upgrade-insecure-requests\\\":\\\"1\\\",\\\"connection\\\":\\\"close\\\",\\\"accept-encoding\\\":\\\"gzip, deflate\\\",\\\"user-agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.5481.178 Safari/537.36\\\",\\\"sec-fetch-dest\\\":\\\"document\\\"}\"}, \"response\": {\"statusCode\": 200, \"body\": \"<!--\\n  ~ Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.\\n  ~ SPDX-License-Identifier: MIT\\n  --><!DOCTYPE html><html lang=\\\"en\\\"><head>\\n  <meta charset=\\\"utf-8\\\">\\n  <title>OWASP Juice Shop</title>\\n  <meta name=\\\"description\\\" content=\\\"Probably the most modern and sophisticated insecure web application\\\">\\n  <meta name=\\\"viewport\\\" content=\\\"width=device-width, initial-scale=1\\\">\\n  <link id=\\\"favicon\\\" rel=\\\"icon\\\" type=\\\"image/x-icon\\\" href=\\\"assets/public/favicon_js.ico\\\">\\n  <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css\\\">\\n  <script src=\\\"//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js\\\"></script>\\n  <script src=\\\"//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js\\\"></script>\\n  <script>\\n    window.addEventListener(\\\"load\\\", function(){\\n      window.cookieconsent.initialise({\\n        \\\"palette\\\": {\\n          \\\"popup\\\": { \\\"background\\\": \\\"#546e7a\\\", \\\"text\\\": \\\"#ffffff\\\" },\\n          \\\"button\\\": { \\\"background\\\": \\\"#558b2f\\\", \\\"text\\\": \\\"#ffffff\\\" }\\n        },\\n        \\\"theme\\\": \\\"classic\\\",\\n        \\\"position\\\": \\\"bottom-right\\\",\\n        \\\"content\\\": { \\\"message\\\": \\\"This website uses fruit cookies to ensure you get the juiciest tracking experience.\\\", \\\"dismiss\\\": \\\"Me want it!\\\", \\\"link\\\": \\\"But me wait!\\\", \\\"href\\\": \\\"https://www.youtube.com/watch?v=9PnbKL3wuH4\\\" }\\n      })});\\n  </script>\\n<style>.bluegrey-lightgreen-theme.mat-app-background{background-color:#303030;color:#fff}@charset \\\"UTF-8\\\";@media screen and (-webkit-min-device-pixel-ratio:0){}</style><link rel=\\\"stylesheet\\\" href=\\\"styles.css\\\" media=\\\"print\\\" onload=\\\"this.media='all'\\\"><noscript><link rel=\\\"stylesheet\\\" href=\\\"styles.css\\\"></noscript></head>\\n<body class=\\\"mat-app-background bluegrey-lightgreen-theme\\\">\\n  <app-root></app-root>\\n<script src=\\\"runtime.js\\\" type=\\\"module\\\"></script><script src=\\\"polyfills.js\\\" type=\\\"module\\\"></script><script src=\\\"vendor.js\\\" type=\\\"module\\\"></script><script src=\\\"main.js\\\" type=\\\"module\\\"></script>\\n\\n</body></html>\", \"headers\": \"{\\\"date\\\":\\\"Wed, 17 May 2023 06:46:14 GMT\\\",\\\"access-control-allow-origin\\\":\\\"*\\\",\\\"last-modified\\\":\\\"Tue, 16 May 2023 08:42:03 GMT\\\",\\\"x-content-type-options\\\":\\\"nosniff\\\",\\\"x-recruiting\\\":\\\"/#/jobs\\\",\\\"vary\\\":\\\"Accept-Encoding\\\",\\\"x-frame-options\\\":\\\"SAMEORIGIN\\\",\\\"content-type\\\":\\\"text/html; charset=UTF-8\\\",\\\"etag\\\":\\\"W/\\\\\\\"7c3-18823b94087\\\\\\\"\\\",\\\"accept-ranges\\\":\\\"bytes\\\",\\\"cache-control\\\":\\\"public, max-age=0\\\",\\\"feature-policy\\\":\\\"payment 'self'\\\"}\"}}",
        "originalMessage": "{\"method\":\"GET\",\"requestPayload\":\"\",\"responsePayload\":\"<!--\\n  ~ Copyright (c) 2014-2023 Bjoern Kimminich & the OWASP Juice Shop contributors.\\n  ~ SPDX-License-Identifier: MIT\\n  --><!DOCTYPE html><html lang=\\\"en\\\"><head>\\n  <meta charset=\\\"utf-8\\\">\\n  <title>OWASP Juice Shop</title>\\n  <meta name=\\\"description\\\" content=\\\"Probably the most modern and sophisticated insecure web application\\\">\\n  <meta name=\\\"viewport\\\" content=\\\"width=device-width, initial-scale=1\\\">\\n  <link id=\\\"favicon\\\" rel=\\\"icon\\\" type=\\\"image/x-icon\\\" href=\\\"assets/public/favicon_js.ico\\\">\\n  <link rel=\\\"stylesheet\\\" type=\\\"text/css\\\" href=\\\"//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.css\\\">\\n  <script src=\\\"//cdnjs.cloudflare.com/ajax/libs/cookieconsent2/3.1.0/cookieconsent.min.js\\\"></script>\\n  <script src=\\\"//cdnjs.cloudflare.com/ajax/libs/jquery/2.2.4/jquery.min.js\\\"></script>\\n  <script>\\n    window.addEventListener(\\\"load\\\", function(){\\n      window.cookieconsent.initialise({\\n        \\\"palette\\\": {\\n          \\\"popup\\\": { \\\"background\\\": \\\"#546e7a\\\", \\\"text\\\": \\\"#ffffff\\\" },\\n          \\\"button\\\": { \\\"background\\\": \\\"#558b2f\\\", \\\"text\\\": \\\"#ffffff\\\" }\\n        },\\n        \\\"theme\\\": \\\"classic\\\",\\n        \\\"position\\\": \\\"bottom-right\\\",\\n        \\\"content\\\": { \\\"message\\\": \\\"This website uses fruit cookies to ensure you get the juiciest tracking experience.\\\", \\\"dismiss\\\": \\\"Me want it!\\\", \\\"link\\\": \\\"But me wait!\\\", \\\"href\\\": \\\"https://www.youtube.com/watch?v=9PnbKL3wuH4\\\" }\\n      })});\\n  </script>\\n<style>.bluegrey-lightgreen-theme.mat-app-background{background-color:#303030;color:#fff}@charset \\\"UTF-8\\\";@media screen and (-webkit-min-device-pixel-ratio:0){}</style><link rel=\\\"stylesheet\\\" href=\\\"styles.css\\\" media=\\\"print\\\" onload=\\\"this.media='all'\\\"><noscript><link rel=\\\"stylesheet\\\" href=\\\"styles.css\\\"></noscript></head>\\n<body class=\\\"mat-app-background bluegrey-lightgreen-theme\\\">\\n  <app-root></app-root>\\n<script src=\\\"runtime.js\\\" type=\\\"module\\\"></script><script src=\\\"polyfills.js\\\" type=\\\"module\\\"></script><script src=\\\"vendor.js\\\" type=\\\"module\\\"></script><script src=\\\"main.js\\\" type=\\\"module\\\"></script>\\n\\n</body></html>\",\"ip\":\"null\",\"source\":\"HAR\",\"type\":\"HTTP/1.1\",\"akto_vxlan_id\":\"1679459648\",\"path\":\"https://juiceshop.akto.io/\",\"requestHeaders\":\"{\\\"Cookie\\\":\\\"language=en; welcomebanner_status=dismiss; cookieconsent_status=dismiss; continueCode=v7BmaPZbQ7NroLqvm1YzMVnwOBAVkTefndgpE5jkJlXey43R68K2D9xWNQgq\\\",\\\"Accept\\\":\\\"text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7\\\",\\\"User-Agent\\\":\\\"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/110.0.5481.178 Safari/537.36\\\",\\\"Connection\\\":\\\"close\\\",\\\"Sec-Fetch-Site\\\":\\\"none\\\",\\\"Sec-Fetch-Dest\\\":\\\"document\\\",\\\"Host\\\":\\\"juiceshop.akto.io\\\",\\\"Accept-Encoding\\\":\\\"gzip, deflate\\\",\\\"Sec-Fetch-Mode\\\":\\\"navigate\\\",\\\"sec-ch-ua\\\":\\\"\\\\\\\"Not A(Brand\\\\\\\";v=\\\\\\\"24\\\\\\\", \\\\\\\"Chromium\\\\\\\";v=\\\\\\\"110\\\\\\\"\\\",\\\"sec-ch-ua-mobile\\\":\\\"?0\\\",\\\"Upgrade-Insecure-Requests\\\":\\\"1\\\",\\\"sec-ch-ua-platform\\\":\\\"\\\\\\\"macOS\\\\\\\"\\\",\\\"Sec-Fetch-User\\\":\\\"?1\\\",\\\"Accept-Language\\\":\\\"en-GB,en-US;q=0.9,en;q=0.8\\\"}\",\"responseHeaders\":\"{\\\"Access-Control-Allow-Origin\\\":\\\"*\\\",\\\"X-Content-Type-Options\\\":\\\"nosniff\\\",\\\"Connection\\\":\\\"close\\\",\\\"Last-Modified\\\":\\\"Thu, 09 Mar 2023 14:46:29 GMT\\\",\\\"Date\\\":\\\"Thu, 09 Mar 2023 14:48:39 GMT\\\",\\\"X-Frame-Options\\\":\\\"SAMEORIGIN\\\",\\\"Accept-Ranges\\\":\\\"bytes\\\",\\\"X-Recruiting\\\":\\\"/#/jobs\\\",\\\"Cache-Control\\\":\\\"public, max-age=0\\\",\\\"ETag\\\":\\\"W/\\\\\\\"7c3-186c6d67748\\\\\\\"\\\",\\\"Feature-Policy\\\":\\\"payment 'self'\\\",\\\"Vary\\\":\\\"Accept-Encoding\\\",\\\"Content-Length\\\":\\\"1987\\\",\\\"Content-Type\\\":\\\"text/html; charset=UTF-8\\\"}\",\"time\":\"1678373319\",\"contentType\":\"text/html; charset=UTF-8\",\"akto_account_id\":\"1000000\",\"statusCode\":\"200\",\"status\":\"OK\"}"
      }
    ],
    "testSubType": "CHANGE_METHOD_TO_DELETE",
    "vulnerable": true,
    "testRunResultSummaryId": {
      "date": "2023-05-17T12:16:08",
      "timestamp": 1684305968
    },
    "testRunId": {
      "date": "2023-05-17T12:14:33",
      "timestamp": 1684305873
    },
    "testSuperType": "BFLA",
    "id": {
      "date": "2023-05-17T12:16:14",
      "timestamp": 1684305974
    },
    "apiInfoKey": {
      "method": {
        "_name": "GET"
      },
      "apiCollectionId": 1679459648,
      "url": "https://juiceshop.akto.io/"
    },
    "confidencePercentage": 100,
    "endTimestamp": 1684305974,
    "startTimestamp": 1684305973,
    "hexId": "6464783658e3a17b14ddfa67"
  },
  "authMechanism": "null",
  "fetchCicd": false,
  "testingRun": "null",
  "testRunTime": 0,
  "testingRunHexId": "null",
  "endTimestamp": 0,
  "startTimestamp": 0,
  "testName": "null"
}

POST request for endpoint /api/fetchAllIssues

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

limitinteger · int32OptionalExample: 20

filterStatusstring[]OptionalExample: OPEN

skipinteger · int32OptionalExample: 0

startEpochinteger · int32OptionalExample: 0

Responses

200

description

application/json

Sample description

vulnerableRequestsstringOptionalExample: null

issueIdstringOptionalExample: null

similarlyAffectedIssuesstringOptionalExample: null

filterStatusstring[]OptionalExample: OPEN

skipinteger · int32OptionalExample: 0

startEpochinteger · int32OptionalExample: 0

issueIdArraystringOptionalExample: null

testSourceConfigsstringOptionalExample: null

subCategoriesstringOptionalExample: null

totalIssuesCountinteger · int32OptionalExample: 299

testingRunResultstringOptionalExample: null

ignoreReasonstringOptionalExample: null

limitinteger · int32OptionalExample: 20

categoriesstringOptionalExample: null

statusToBeUpdatedstringOptionalExample: null

post

/api/fetchAllIssues

HTTPcURLJavaScriptPython

POST /api/fetchAllIssues HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 60

{
  "limit": 20,
  "filterStatus": [
    "OPEN"
  ],
  "skip": 0,
  "startEpoch": 0
}

200

description

{
  "vulnerableRequests": "null",
  "issueId": "null",
  "similarlyAffectedIssues": "null",
  "filterStatus": [
    "OPEN"
  ],
  "skip": 0,
  "startEpoch": 0,
  "issueIdArray": "null",
  "testSourceConfigs": "null",
  "issues": [
    {
      "severity": "HIGH",
      "lastSeen": 1684304084,
      "creationTime": 1684304084,
      "testRunIssueStatus": "OPEN",
      "latestTestingRunSummaryId": {
        "date": "2023-05-17T12:16:08",
        "timestamp": 1684301977
      },
      "ignoreReason": "null",
      "id": {
        "testSubCategory": "ADD_PUT_METHOD_OVERRIDE_HEADERS",
        "testErrorSource": "AUTOMATED_TESTING",
        "testCategoryFromSourceConfig": "null",
        "apiInfoKey": {
          "method": "POST",
          "apiCollectionId": 1679462413,
          "url": "http://localhost:8080/api/updateProfile"
        },
        "testSourceConfig": "null"
      }
    }
  ],
  "subCategories": "null",
  "totalIssuesCount": 299,
  "testingRunResult": "null",
  "ignoreReason": "null",
  "limit": 20,
  "categories": "null",
  "statusToBeUpdated": "null"
}

POST request for endpoint /api/fetchIssuesFromCollections

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

filterCollectionNamesstring[]OptionalExample: juice_shop_demo

limitinteger · int32OptionalExample: 20

filterStatusstring[]OptionalExample: OPEN

filterSeveritystring[]OptionalExample: CRITICAL

skipinteger · int32OptionalExample: 0

startEpochinteger · int32OptionalExample: 0

Responses

200

description

application/json

Sample description

openIssuesCountinteger · int32OptionalExample: 21

fixedIssuesCountinteger · int32OptionalExample: 0

ignoredIssuesCountinteger · int32OptionalExample: 0

post

/api/fetchIssuesFromCollections

HTTPcURLJavaScriptPython

POST /api/fetchIssuesFromCollections HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 134

{
  "filterCollectionNames": [
    "juice_shop_demo"
  ],
  "limit": 20,
  "filterStatus": [
    "OPEN"
  ],
  "filterSeverity": [
    "CRITICAL"
  ],
  "skip": 0,
  "startEpoch": 0
}

200

description

{
  "issueDetails": [
    {
      "apiUrl": "https://juiceshop.akto.io/redirect",
      "apiMethod": "GET",
      "apiCollectionId": 1770879436,
      "testSubCategory": "OPEN_REDIRECT",
      "status": "OPEN",
      "severity": "HIGH",
      "creationTime": 1773741082,
      "lastSeen": 1773741082,
      "issueUrl": "https://app.akto.io/dashboard/reports/issues?result=69b9241a1f07a41b7a9653fe",
      "testName": "Open redirect",
      "testDescription": "An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain.",
      "testDetails": "Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way.",
      "testImpact": "This behavior can be leveraged to facilitate phishing attacks against users of the application.",
      "testRemediation": "null",
      "testSeverityFromTemplate": "HIGH",
      "testTags": [
        "Business logic"
      ],
      "testReferences": [
        "https://portswigger.net/kb/issues/00500100_open-redirection-reflected"
      ],
      "testCwe": "null",
      "testCve": "null",
      "testCategory": "Security Misconfiguration (SM)"
    }
  ],
  "openIssuesCount": 21,
  "fixedIssuesCount": 0,
  "ignoredIssuesCount": 0
}

POST request for endpoint /api/fetchTestingRunResultSummaries

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

testingRunHexIdstringOptionalExample: 646477d11cf07b51403bf5b1

endTimestampinteger · int32OptionalExample: 1684477795

startTimestampinteger · int32OptionalExample: 1683901795

Responses

200

description

application/json

Sample description

metadatastringOptionalExample: null

testingRunResultsstringOptionalExample: null

runIssuesstringOptionalExample: null

selectedTestsstringOptionalExample: null

maxConcurrentRequestsinteger · int32OptionalExample: 0

testingRunsstringOptionalExample: null

recurringDailybooleanOptionalExample: false

workflowTeststringOptionalExample: null

authMechanismstringOptionalExample: null

testingRunResultstringOptionalExample: null

fetchCicdbooleanOptionalExample: false

testRunTimeinteger · int32OptionalExample: 0

testingRunHexIdstringOptionalExample: 646477d11cf07b51403bf5b1

endTimestampinteger · int32OptionalExample: 1684477795

startTimestampinteger · int32OptionalExample: 1683901795

testNamestringOptionalExample: null

post

/api/fetchTestingRunResultSummaries

HTTPcURLJavaScriptPython

POST /api/fetchTestingRunResultSummaries HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 100

{
  "testingRunHexId": "646477d11cf07b51403bf5b1",
  "endTimestamp": 1684477795,
  "startTimestamp": 1683901795
}

200

description

{
  "metadata": "null",
  "testingRunResults": "null",
  "testingRunResultSummaries": [
    {
      "metadata": "null",
      "totalApis": 19,
      "testResultsCount": 72,
      "countIssues": {
        "HIGH": 7,
        "MEDIUM": 0,
        "LOW": 0
      },
      "testingRunId": {
        "date": "2023-05-17T12:14:33",
        "timestamp": 1684305873
      },
      "id": {
        "date": "2023-05-17T12:16:08",
        "timestamp": 1684305968
      },
      "testingRunHexId": "null",
      "state": "COMPLETED",
      "endTimestamp": 1684305974,
      "startTimestamp": 1684305968,
      "hexId": "6464783058e3a17b14ddf64e"
    }
  ],
  "runIssues": "null",
  "selectedTests": "null",
  "maxConcurrentRequests": 0,
  "testingRuns": "null",
  "recurringDaily": false,
  "workflowTest": "null",
  "authMechanism": "null",
  "testingRunResult": "null",
  "fetchCicd": false,
  "testingRun": {
    "periodInSeconds": 0,
    "testingRunConfig": "null",
    "testingEndpoints": {
      "apiCollectionId": 1679459648,
      "type": "COLLECTION_WISE"
    },
    "maxConcurrentRequests": -1,
    "testIdConfig": 1684305873,
    "pickedUpTimestamp": 1684305968,
    "scheduleTimestamp": 1684305852,
    "name": "juice_shop_demo_BFLA_RL",
    "userEmail": "[email protected]",
    "testRunTime": -1,
    "id": {
      "date": "2023-05-17T12:14:33",
      "timestamp": 1684305873
    },
    "state": "COMPLETED",
    "endTimestamp": 1684305974,
    "hexId": "646477d11cf07b51403bf5b1"
  },
  "testRunTime": 0,
  "testingRunHexId": "646477d11cf07b51403bf5b1",
  "endTimestamp": 1684477795,
  "startTimestamp": 1683901795,
  "testName": "null"
}

POST request for endpoint /api/fetchTestingRunResults

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

testingRunResultSummaryHexIdstringOptionalExample: 6464783058e3a17b14ddf64e

Responses

200

description

application/json

Sample description

metadatastringOptionalExample: null

testingRunResultSummariesstringOptionalExample: null

runIssuesstringOptionalExample: null

selectedTestsstringOptionalExample: null

maxConcurrentRequestsinteger · int32OptionalExample: 0

testingRunsstringOptionalExample: null

recurringDailybooleanOptionalExample: false

workflowTeststringOptionalExample: null

authMechanismstringOptionalExample: null

testingRunResultstringOptionalExample: null

fetchCicdbooleanOptionalExample: false

testingRunstringOptionalExample: null

testRunTimeinteger · int32OptionalExample: 0

testingRunHexIdstringOptionalExample: null

endTimestampinteger · int32OptionalExample: 0

startTimestampinteger · int32OptionalExample: 0

testNamestringOptionalExample: null

post

/api/fetchTestingRunResults

HTTPcURLJavaScriptPython

POST /api/fetchTestingRunResults HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 59

{
  "testingRunResultSummaryHexId": "6464783058e3a17b14ddf64e"
}

200

description

{
  "metadata": "null",
  "testingRunResults": [
    {
      "testResults": "null",
      "testRunResultSummaryId": {
        "date": "2023-05-17T12:16:08",
        "timestamp": 1684305968
      },
      "testRunId": {
        "date": "2023-05-17T12:14:33",
        "timestamp": 1684305873
      },
      "singleTypeInfos": "null",
      "vulnerable": true,
      "testSubType": "CHANGE_METHOD_TO_GET",
      "testSuperType": "BFLA",
      "apiInfoKey": {
        "method": "POST",
        "apiCollectionId": 1679459648,
        "url": "https://juiceshop.akto.io/rest/basket/6"
      },
      "id": {
        "date": "2023-05-17T12:16:13",
        "timestamp": 1684305973
      },
      "confidencePercentage": 100,
      "endTimestamp": 1684305972,
      "startTimestamp": 1684305972,
      "hexId": "6464783658e3a17b14ddfa47"
    }
  ],
  "testingRunResultSummaries": "null",
  "runIssues": "null",
  "selectedTests": "null",
  "maxConcurrentRequests": 0,
  "testingRuns": "null",
  "recurringDaily": false,
  "workflowTest": "null",
  "authMechanism": "null",
  "testingRunResult": "null",
  "fetchCicd": false,
  "testingRun": "null",
  "testRunTime": 0,
  "testingRunHexId": "null",
  "endTimestamp": 0,
  "startTimestamp": 0,
  "testName": "null"
}

POST request for endpoint /api/retrieveAllCollectionTests

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

fetchCicdbooleanOptionalExample: false

Responses

200

description

application/json

Sample description

metadatastringOptionalExample: null

testingRunResultsstringOptionalExample: null

testingRunResultSummariesstringOptionalExample: null

runIssuesstringOptionalExample: null

selectedTestsstringOptionalExample: null

maxConcurrentRequestsinteger · int32OptionalExample: 0

recurringDailybooleanOptionalExample: false

workflowTeststringOptionalExample: null

testingRunResultstringOptionalExample: null

fetchCicdbooleanOptionalExample: false

testingRunstringOptionalExample: null

testRunTimeinteger · int32OptionalExample: 0

testingRunHexIdstringOptionalExample: null

endTimestampinteger · int32OptionalExample: 1684564190

startTimestampinteger · int32OptionalExample: 1684477790

testNamestringOptionalExample: null

post

/api/retrieveAllCollectionTests

HTTPcURLJavaScriptPython

POST /api/retrieveAllCollectionTests HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 19

{
  "fetchCicd": false
}

200

description

{
  "metadata": "null",
  "testingRunResults": "null",
  "testingRunResultSummaries": "null",
  "runIssues": "null",
  "selectedTests": "null",
  "maxConcurrentRequests": 0,
  "recurringDaily": false,
  "workflowTest": "null",
  "authMechanism": {
    "authParams": [
      {
        "showHeader": true,
        "where": "HEADER",
        "value": "text",
        "key": "access-token"
      }
    ],
    "id": {
      "date": "2023-03-22T12:11:33",
      "timestamp": 1679467293
    },
    "type": "HARDCODED",
    "uuid": "83c47038-0770-4f7c-946c-539b5927a97f"
  },
  "testingRunResult": "null",
  "fetchCicd": false,
  "testingRun": "null",
  "testRunTime": 0,
  "testingRunHexId": "null",
  "endTimestamp": 1684564190,
  "startTimestamp": 1684477790,
  "testName": "null"
}

POST request for endpoint /api/fetchIssuesFromCollections

post

Header parameters

content-typestringOptionalExample: application/json

X-API-KEYstringOptionalExample: YOUR_API_KEY from Settings > Integrations > Akto APIs

Body

application/json

Sample description

filterCollectionNamesstring[]OptionalExample: juice_shop_demo

limitinteger · int32OptionalExample: 20

filterStatusstring[]OptionalExample: OPEN

filterSeveritystring[]OptionalExample: CRITICAL

skipinteger · int32OptionalExample: 0

startEpochinteger · int32OptionalExample: 0

Responses

200

description

application/json

Sample description

openIssuesCountinteger · int32OptionalExample: 21

fixedIssuesCountinteger · int32OptionalExample: 0

ignoredIssuesCountinteger · int32OptionalExample: 0

post

/api/fetchIssuesFromCollections

HTTPcURLJavaScriptPython

POST /api/fetchIssuesFromCollections HTTP/1.1
Content-Type: application/json
Accept: */*
Content-Length: 134

{
  "filterCollectionNames": [
    "juice_shop_demo"
  ],
  "limit": 20,
  "filterStatus": [
    "OPEN"
  ],
  "filterSeverity": [
    "CRITICAL"
  ],
  "skip": 0,
  "startEpoch": 0
}

200

description

{
  "issueDetails": [
    {
      "apiUrl": "https://juiceshop.akto.io/redirect",
      "apiMethod": "GET",
      "apiCollectionId": 1770879436,
      "testSubCategory": "OPEN_REDIRECT",
      "status": "OPEN",
      "severity": "HIGH",
      "creationTime": 1773741082,
      "lastSeen": 1773741082,
      "issueUrl": "https://app.akto.io/dashboard/reports/issues?result=69b9241a1f07a41b7a9653fe",
      "testName": "Open redirect",
      "testDescription": "An attacker can construct a URL within the application that causes a redirection to an arbitrary external domain.",
      "testDetails": "Open redirection vulnerabilities arise when an application incorporates user-controllable data into the target of a redirection in an unsafe way.",
      "testImpact": "This behavior can be leveraged to facilitate phishing attacks against users of the application.",
      "testRemediation": "null",
      "testSeverityFromTemplate": "HIGH",
      "testTags": [
        "Business logic"
      ],
      "testReferences": [
        "https://portswigger.net/kb/issues/00500100_open-redirection-reflected"
      ],
      "testCwe": "null",
      "testCve": "null",
      "testCategory": "Security Misconfiguration (SM)"
    }
  ],
  "openIssuesCount": 21,
  "fixedIssuesCount": 0,
  "ignoredIssuesCount": 0
}