back

by stikit·1y ago·view on hn ↗
something is missing from this story. it doesn’t make sense they jumped right to blocking your account because you requested to integrate. You sort of skipped over the part where you got hold of the Swagger files. would you care to elaborate on how exactly you found those files and if this might have been the reason for the heavy handed response? usually swagger files would be locked down on the backend .
3 comments
They seem to be public. A simple "University of Washington swagger" search turned this up: https://itconnect.uw.edu/tools-services-support/data-reporti...
they're public. After searching for "university of washington student web service" thr homepage literally links to https://ws.admin.washington.edu/student/swagger/index.html
> would you care to elaborate on how exactly you found those files and if this might have been the reason for the heavy handed response? usually swagger files would be locked down on the backend .

Presumably by visiting `https://site.com/swagger-ui` or one of the other common doc endpoints. It's not that hard, and many places do not lock them down (even if they should).