All tests / Hidden data
API token in the page
What this tests. A table filled from an API that answers 403 unless you send the token an inline script on the page sets.
The rule. The table comes from GET /hidden/token/api, which answers 403 unless the
request carries a X-Api-Token header with the right value. That value is in a small inline script on this page,
in window.NW_CONFIG.apiToken. It doesn't change from day to day, but you can't guess it: read the page, take
the token, send it.
- Medium
- Needs JS
- Answer key
/hidden/token/answers.json
| SKU | Product | Price | Stock |
|---|
Data version 1.0.0. Everything here is made up: products, brands, people, towns. tests.json · robots.txt · Source