Development security tooling

Hostile API Test Console

Exercise public and secured Kegani endpoints with valid, missing, malformed and cross-tenant credentials.

development · KEGANI_CONNECT

Development/test only. Tokens are held in this browser tab using session storage and are never written to the server by this page.

Loading console JavaScript…

1. Test identity

Bearer token

Create a test session from cPanel Terminal

cd ~/public_html/kegani.procuretoreport.com
php bin/create-test-session.php USER_ID CLIENT_ID 60

Authenticated client ID Different client ID

Resolved token identity

Run the matrix or load the catalogue to resolve the bearer token.

2. Security test matrix

Runs deterministic checks against the current deployment. A test passes only when the actual HTTP status matches the expected status.

Not run

Test	Expected	Actual	Result	Message

3. API catalogue and access map

Applications, functional groups and endpoints are shown as a hierarchy. Every API is shown with separate deployment and access statuses. Compact cards keep the hierarchy usable as the catalogue grows.

Paste a valid bearer token, then load the catalogue.

Ready to test Contract only

Permitted Denied No permission mapping Inactive

Catalogue not loaded.

4. Request builder

Select a compact endpoint card above. Ready endpoints can be executed now; contract-only endpoints are visibly identified and are not presented as implemented.

Selected endpoint: Authentication contextImplementation: Ready to testFull route: GET /api/v1/authentication/context

Method

Same-origin path

Authorization

Additional headers (JSON object)

JSON body

5. Complete response

No request sent

Response headers

—

Response body

—

6. Request history

Time	Method	Path	Status	Duration	Authentication
No requests in this tab.