Swagger Spill

Challenge Question

A developer published the full API specification for a customer-facing service so that partners could read the documentation. A spec like this lists every endpoint the backend exposes, including routes that were only ever meant for internal staff. Read the specification closely, work out which routes were never meant to be public, and see what the server hands back when you call them.