Error 401 Unauthorized

GET https://api.dev.victo-app.fr/graphql/graphiql

IP
216.73.216.67
Profiled on
Token
f11c4c

Request / Response

Request

GET Parameters

None

POST Parameters

None

Uploaded Files

None

Request Attributes

Key Value
_controller 
"api_platform.graphql.action.graphiql"
_firewall_context 
"security.firewall.map.context.main"
_graphql 
true
_route 
"api_graphql_graphiql"
_route_params 
[
  "_graphql" => true
]
_security_authenticators 
[]
_security_skipped_authenticators 
[
  Symfony\Component\Security\Http\Authenticator\Debug\TraceableAuthenticator {#446
    -supports: false
    -passport: null
    -duration: null
    -stub: "Lexik\Bundle\JWTAuthenticationBundle\Security\Authenticator\JWTAuthenticator"
    -authenticated: null
    -exception: null
    -authenticator: Lexik\Bundle\JWTAuthenticationBundle\Security\Authenticator\JWTAuthenticator {#484 …}
  }
]
_stopwatch_token 
"ebee9d"

Request Headers

Header Value
accept 
"*/*"
accept-encoding 
"gzip, br, zstd, deflate"
host 
"api.dev.victo-app.fr"
user-agent 
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
x-php-ob-level 
"1"

Request Content

Request content not available (it was retrieved as a resource).

Retry Command

curl \
  --compressed \
  --url 'https://api.dev.victo-app.fr/graphql/graphiql' \
  --header 'Accept-Encoding: gzip, br, zstd, deflate' \
  --header 'User-Agent: Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)' \
  --header 'Accept: */*' \
  --header 'X-Php-Ob-Level: 1'

Response

Response Headers

Header Value
cache-control 
"no-cache, private"
content-type 
"application/json"
date 
"Fri, 18 Sep 2026 17:58:12 GMT"
www-authenticate 
"Bearer"
x-debug-token 
"f11c4c"
x-robots-tag 
"noindex"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV 
"dev"
APP_SECRET 
"!ChangeMe!"
APP_SHARE_DIR 
"var/share"
CORS_ALLOW_ORIGIN 
"^https?://(localhost|127\.0\.0\.1|.*\.victo-app\.fr)(:[0-9]+)?$"
DATABASE_URL 
"postgresql://victo:victo@127.0.0.1:5432/victo_dev?serverVersion=17&charset=utf8"
DEFAULT_URI 
"https://localhost"
JWT_PASSPHRASE 
"65a35bc87a5cc6027ed9e6c41c2bce3b7b2019fa4335c7c536333adca2c42c6a"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
MAILER_DSN 
"smtp://notifications%40victo-app.fr:9x87rUj9yMtyxDpPdWqC%24@ssl0.ovh.net:465"
MATRIX_AS_TOKEN 
"x3B02lYfk24GNASVdw5Vv9QqgjXQPIwUDfNb3hCjoA3ITLpzHBnpPMOhKutZtj8L"
MATRIX_BOT_ACCESS_TOKEN 
"syt_dmljdG8_WXORbnErsfWwXvQmHPhW_0wCedo"
MATRIX_DOMAIN 
"matrix.victo-app.fr"
MATRIX_HOMESERVER_URL 
"https://matrix.victo-app.fr"
MATRIX_HS_TOKEN 
"8Oq59XpOk5K4rvJXvyc19ryBkQvKd0vczegkoizPVGJwrbqz3uHECM9jSqwQ9gVL"
MATRIX_TARGET_SPACE_ID 
"!f-4zEh0A1e7KDRtfClOqrbBrJeZvRKhE2gKiai7mRo0"
MERCURE_JWT_SECRET 
"!ChangeThisMercureHubJWTSecretKey!"
MERCURE_PUBLIC_URL 
"https://localhost/.well-known/mercure"
MERCURE_URL 
"http://php/.well-known/mercure"
OIDC_API_CLIENT_ID 
"api-platform-api"
OIDC_API_CLIENT_SECRET 
"sEocbxCy7iFS8NzYzWyQ71QgxTDZ9fnU"
OIDC_AUD 
"api-platform"
OIDC_SERVER_URL 
"https://localhost/oidc/realms/demo"
OIDC_SERVER_URL_INTERNAL 
"http://keycloak:8080/oidc/realms/demo"
OIDC_SWAGGER_CLIENT_ID 
"api-platform-swagger"
TRUSTED_HOSTS 
"^(localhost|php)$"
TRUSTED_PROXIES 
"127.0.0.0/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"

Defined as regular env variables

Key Value
APP_DEBUG 
"1"
APP_PROJECT_DIR 
"/var/www/Victo/dev/api"
APP_RUNTIME 
"Symfony\Component\Runtime\SymfonyRuntime"
APP_RUNTIME_OPTIONS 
[
  "project_dir" => "/var/www/Victo/dev/api"
]
CONTEXT_DOCUMENT_ROOT 
"/var/www/Victo/dev/api/public"
CONTEXT_PREFIX 
""
DOCUMENT_ROOT 
"/var/www/Victo/dev/api/public"
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
HOME 
"/var/www"
HTTPS 
"on"
HTTP_ACCEPT 
"*/*"
HTTP_ACCEPT_ENCODING 
"gzip, br, zstd, deflate"
HTTP_HOST 
"api.dev.victo-app.fr"
HTTP_USER_AGENT 
"Mozilla/5.0 AppleWebKit/537.36 (KHTML, like Gecko; compatible; ClaudeBot/1.0; +claudebot@anthropic.com)"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/snap/bin"
PHP_SELF 
"/index.php"
QUERY_STRING 
""
REMOTE_ADDR 
"216.73.216.67"
REMOTE_PORT 
"10091"
REQUEST_METHOD 
"GET"
REQUEST_SCHEME 
"https"
REQUEST_TIME 
1789754292
REQUEST_TIME_FLOAT 
1789754292.3113
REQUEST_URI 
"/graphql/graphiql"
SCRIPT_FILENAME 
"/var/www/Victo/dev/api/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"149.202.95.185"
SERVER_ADMIN 
"webmaster@localhost"
SERVER_NAME 
"api.dev.victo-app.fr"
SERVER_PORT 
"443"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SIGNATURE 
"<address>Apache/2.4.68 (Debian) Server at api.dev.victo-app.fr Port 443</address>\n"
SERVER_SOFTWARE 
"Apache/2.4.68 (Debian)"
SSL_TLS_SNI 
"api.dev.victo-app.fr"
SYMFONY_DOTENV_PATH 
"/var/www/Victo/dev/api/.env"
SYMFONY_DOTENV_VARS 
"TRUSTED_PROXIES,TRUSTED_HOSTS,OIDC_SERVER_URL,OIDC_SERVER_URL_INTERNAL,OIDC_SWAGGER_CLIENT_ID,OIDC_API_CLIENT_ID,OIDC_API_CLIENT_SECRET,OIDC_AUD,APP_ENV,APP_SECRET,APP_SHARE_DIR,DATABASE_URL,CORS_ALLOW_ORIGIN,MERCURE_URL,MERCURE_PUBLIC_URL,MERCURE_JWT_SECRET,DEFAULT_URI,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,MAILER_DSN,MATRIX_HOMESERVER_URL,MATRIX_DOMAIN,MATRIX_AS_TOKEN,MATRIX_HS_TOKEN,MATRIX_BOT_ACCESS_TOKEN,MATRIX_TARGET_SPACE_ID"
USER 
"www-data"
proxy-nokeepalive 
"1"