ZAP by Checkmarx Scanning Report

The given request has been identified as an authentication request. The 'Other Info' field contains a set of key=value lines which identify any relevant fields. If the request is in a context which has an Authentication Method set to "Auto-Detect" then this rule will change the authentication to match the request identified.

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
pragma: no-cache
cache-control: no-cache
accept: */*
content-type: application/json
content-length: 40
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjU4MiwiZXhwIjoxNzY1MjQ4OTgyfQ.OV0FC031pbEYK5ZQkqx8m0ak7Yi7VbystZIBK9YMYek

{"username":"John Doe","password":"ZAP"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:56:22 GMT
content-length: 79

{"success":false,"message":"Username contains invalid characters","token":null}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:56:20 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjU4MCwiZXhwIjoxNzY1MjQ4OTgwfQ.d1yruQmw96EAN2EX8lPKZFxtjys_OHViUZBE66b7tO4"}

This is an informational alert rather than a vulnerability and so there is nothing to fix.

The given response has been identified as containing a session management token. The 'Other Info' field contains a set of header tokens that can be used in the Header Based Session Management Method. If the request is in a context which has a Session Management Method set to "Auto-Detect" then this rule will change the session management to use the tokens identified.

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:56:20 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjU4MCwiZXhwIjoxNzY1MjQ4OTgwfQ.d1yruQmw96EAN2EX8lPKZFxtjys_OHViUZBE66b7tO4"}

GET http://localhost:8080/api/products/ HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/141.0.0.0 Safari/537.36
pragma: no-cache
cache-control: no-cache
accept: */*
content-length: 0
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjU4MiwiZXhwIjoxNzY1MjQ4OTgyfQ.OV0FC031pbEYK5ZQkqx8m0ak7Yi7VbystZIBK9YMYek

HTTP/1.1 404
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/problem+json
Date: Mon, 08 Dec 2025 02:56:22 GMT
content-length: 127

{"type":"about:blank","title":"Not Found","status":404,"detail":"No static resource api/products.","instance":"/api/products/"}

This is an informational alert rather than a vulnerability and so there is nothing to fix.

Check for differences in response based on fuzzed User Agent (eg. mobile sites, access as a Search Engine Crawler). Compares the response statuscode and the hashcode of the response body with the original response.

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:43 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 6.0)
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:43 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:43 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Trident/7.0; rv:11.0) like Gecko
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:43 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/75.0.3739.0 Safari/537.36 Edg/75.0.109.0
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyMywiZXhwIjoxNzY1MjQ5MTIzfQ.J96vq4bRaSb7dxOfcPociaaL08FrysTpKWcTaggem0k

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:93.0) Gecko/20100101 Firefox/91.0
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (compatible; Googlebot/2.1; +http://www.google.com/bot.html)
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (compatible; Yahoo! Slurp; http://help.yahoo.com/help/us/ysearch/slurp)
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (iPhone; CPU iPhone OS 8_0_2 like Mac OS X) AppleWebKit/600.1.4 (KHTML, like Gecko) Version/8.0 Mobile/12A366 Safari/600.1.4
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: Mozilla/5.0 (iPhone; U; CPU iPhone OS 3_0 like Mac OS X; en-us) AppleWebKit/528.18 (KHTML, like Gecko) Version/4.0 Mobile/7A341 Safari/528.16
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}

POST http://localhost:8080/api/auth/login HTTP/1.1
host: localhost:8080
user-agent: msnbot/1.1 (+http://search.msn.com/msnbot.htm)
pragma: no-cache
cache-control: no-cache
content-type: application/json; charset=utf-8
content-length: 44
Authorization: Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg

{"username":"testuser","password":"Test123"}

HTTP/1.1 200
Vary: Origin
Vary: Access-Control-Request-Method
Vary: Access-Control-Request-Headers
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: 0
X-Frame-Options: DENY
Content-Security-Policy: default-src 'self'
Content-Type: application/json
Date: Mon, 08 Dec 2025 02:58:44 GMT
content-length: 193

{"success":true,"message":"Login successfully","token":"eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ0ZXN0dXNlciIsImlhdCI6MTc2NTE2MjcyNCwiZXhwIjoxNzY1MjQ5MTI0fQ.2DqZd-7Xj6E4cIlEPtOXsaiyf4cGWdUCb1vJKqrECyg"}