Error 401 Unauthorized

POST http://andrew.dev.exacthire.ngrok.app/api/public/oauth/token?subdomain=sandboxclient

IP
172.22.0.1
Profiled on
Token
ea2f4d

OAuthServerController :: tokenAction

Request

GET Parameters

Key Value
subdomain 
"sandboxclient"

POST Parameters

Key Value
grant_type 
"refresh_token"
refresh_token 
"1.1.705435b01fcc52f8f22ce1cca33d75f50003ed183febce48fe953ed4df2e9955"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller 
"ExactHireApi\Controller\OAuthServerController::tokenAction"
_firewall_context 
"security.firewall.map.context.public_api"
_route 
"oauth_server_token"
_route_params 
[]
_stopwatch_token 
"ede548"
media_type 
"application/json"
requestId 
208545

Request Headers

Header Value
accept 
"application/json"
accept-encoding 
"gzip,deflate"
authorization 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpYXQiOjE3OTAyNjgwOTQsImV4cCI6MTc5MDM1NDQ5NCwicm9sZXMiOlsiUk9MRV9BRE1JTklTVFJBVE9SIl0sInNjb3BlIjoiam9iczpyZWFkIGFwcGxpY2F0aW9uczpyZWFkIGFwcGxpY2F0aW9uczpzdGF0dXMgYXBwbGljYXRpb25zOm5vdGVzIGFwcGxpY2F0aW9uczphcmNoaXZlIGFwcGxpY2F0aW9uczpjb3B5IGFwcGxpY2F0aW9uczpjcmVhdGUgd2ViaG9va3M6bWFuYWdlIG9mZmxpbmVfYWNjZXNzIiwiZ2lkIjoxLCJnZW4iOjEsIm9yZ2FuaXphdGlvbklkIjozLCJpZCI6NjU3LCJ0aW1lWm9uZSI6bnVsbH0.ykgNXlGrIpTJl_8smaxpbn7RrnR-23qX_mB0pO-ozWifwJnCGzPOdzOgh0BsaA2PoYHCs7KBavkxPnzYzdlCZmrtVpuPRwsiXZUtQB-OpV_ArbdgYrYO0NiSYNEqSDFMShrdW6k2VAmqO8pjUe7bztcO4K8fA_X6og_p8hg7cu9aUIDQOtSh1jtlfizs0t8xS4VLrrJrnqRP-nzhWQda8LvkinoyK4mcYoJk2UvpdupNt3LtTQxfRT8CchwpwbDs5FtNsbC5E1lQIHD9WZ5Jw5oiTBcCC0VP1dPyp46_l_Jsd5g65uoc2WbYvEcFTniPi1a6Bv7EXlfQdetIE6sew8OLZ-6TXBSA4zppCuElzwq5IqWOWJ7FRMXIRtiYz9dOXAcBuFBLFysM9FQFqd2Q4pi6C11WQO5LkgGTIyk89uv93fG3IjNUWxd3cwDKY6zac23bldUUjmg2z4bosES0bn85tJdpjPfB_zV6M8RAFgOL0qqAXJNoUnsc6ERzSExMBJZGYDcXptM-yJbmiBJYhEgmsepx8MAWrKoRfQuSr2XlBjkbsM7JgBf3bLGlzbN5aetYS7bL2GD83RWALdJ6Xd8-qNYZpumJSpDuA0XdiPfwK72kU24aANZm_Dc-MXJfqu45DamUTH710XcL2dtWl20_2dkhFHcCmknktRSh8Xo"
content-length 
"107"
content-type 
"application/x-www-form-urlencoded"
host 
"andrew.dev.exacthire.ngrok.app"
user-agent 
"Zapier"
x-forwarded-for 
"44.200.173.12"
x-forwarded-host 
"andrew.dev.exacthire.ngrok.app"
x-forwarded-proto 
"https"
x-php-ob-level 
"0"
x-subdomain 
"sandboxclient"

Request Content

Raw

refresh_token=1.1.705435b01fcc52f8f22ce1cca33d75f50003ed183febce48fe953ed4df2e9955&grant_type=refresh_token

Response

Response Headers

Header Value
cache-control 
"no-store, private"
content-type 
"application/json"
date 
"Mon, 28 Sep 2026 20:02:31 GMT"
pragma 
"no-cache"
x-debug-token 
"ea2f4d"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_SECRET 
"d2f2a1162f3f6eb9016a00f3248adde7"
CORS_ALLOW_ORIGIN 
"^https?://localhost(:[0-9]+)?$"
DATABASE_URL 
"mysql://symfony:redcarintodeepwater@db:3306/ocentric_dev"
DEV_API_PORT 
"8091"
DEV_FE_PORT 
"8090"
GOOGLE_API_KEY 
""
GOOGLE_CLIENT_ID 
""
GOOGLE_CLIENT_SECRET 
""
JWT_PASSPHRASE 
"adcd65b83a12f8dfac80f370bb46095c"
JWT_PUBLIC_KEY 
"%kernel.project_dir%/config/jwt/public.pem"
JWT_SECRET_KEY 
"%kernel.project_dir%/config/jwt/private.pem"
OPENSEARCH_SIGV4_REGION 
""
TUNNEL_BASE_URL 
""

Defined as regular env variables

Key Value 
"dev"
APP_DEBUG 
"1"
APP_ENV 
"dev"
CONTAINER_MODE 
"web"
CONTENT_LENGTH 
"107"
CONTENT_TYPE 
"application/x-www-form-urlencoded"
DOCUMENT_ROOT 
"/var/www/exacthire-web/public"
DOCUMENT_URI 
"/index.php//api/public/oauth/token"
E2E_SEED_ON_BOOT 
""
FCGI_ROLE 
"RESPONDER"
GATEWAY_INTERFACE 
"CGI/1.1"
GPG_KEYS 
"528995BFEDFBA7191D46839EF9BA0ADA31CBD89E 39B641343D8C104B2B146DC3F9C39DC0B9698544 F1F692238FBC1666E5A5CCD4199F9DFEF6FFBAFD"
HOME 
"/var/www"
HOSTNAME 
"b595b35050d2"
HTTPS 
"off"
HTTP_ACCEPT 
"application/json"
HTTP_ACCEPT_ENCODING 
"gzip,deflate"
HTTP_AUTHORIZATION 
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJpYXQiOjE3OTAyNjgwOTQsImV4cCI6MTc5MDM1NDQ5NCwicm9sZXMiOlsiUk9MRV9BRE1JTklTVFJBVE9SIl0sInNjb3BlIjoiam9iczpyZWFkIGFwcGxpY2F0aW9uczpyZWFkIGFwcGxpY2F0aW9uczpzdGF0dXMgYXBwbGljYXRpb25zOm5vdGVzIGFwcGxpY2F0aW9uczphcmNoaXZlIGFwcGxpY2F0aW9uczpjb3B5IGFwcGxpY2F0aW9uczpjcmVhdGUgd2ViaG9va3M6bWFuYWdlIG9mZmxpbmVfYWNjZXNzIiwiZ2lkIjoxLCJnZW4iOjEsIm9yZ2FuaXphdGlvbklkIjozLCJpZCI6NjU3LCJ0aW1lWm9uZSI6bnVsbH0.ykgNXlGrIpTJl_8smaxpbn7RrnR-23qX_mB0pO-ozWifwJnCGzPOdzOgh0BsaA2PoYHCs7KBavkxPnzYzdlCZmrtVpuPRwsiXZUtQB-OpV_ArbdgYrYO0NiSYNEqSDFMShrdW6k2VAmqO8pjUe7bztcO4K8fA_X6og_p8hg7cu9aUIDQOtSh1jtlfizs0t8xS4VLrrJrnqRP-nzhWQda8LvkinoyK4mcYoJk2UvpdupNt3LtTQxfRT8CchwpwbDs5FtNsbC5E1lQIHD9WZ5Jw5oiTBcCC0VP1dPyp46_l_Jsd5g65uoc2WbYvEcFTniPi1a6Bv7EXlfQdetIE6sew8OLZ-6TXBSA4zppCuElzwq5IqWOWJ7FRMXIRtiYz9dOXAcBuFBLFysM9FQFqd2Q4pi6C11WQO5LkgGTIyk89uv93fG3IjNUWxd3cwDKY6zac23bldUUjmg2z4bosES0bn85tJdpjPfB_zV6M8RAFgOL0qqAXJNoUnsc6ERzSExMBJZGYDcXptM-yJbmiBJYhEgmsepx8MAWrKoRfQuSr2XlBjkbsM7JgBf3bLGlzbN5aetYS7bL2GD83RWALdJ6Xd8-qNYZpumJSpDuA0XdiPfwK72kU24aANZm_Dc-MXJfqu45DamUTH710XcL2dtWl20_2dkhFHcCmknktRSh8Xo"
HTTP_CONTENT_LENGTH 
"107"
HTTP_CONTENT_TYPE 
"application/x-www-form-urlencoded"
HTTP_HOST 
"andrew.dev.exacthire.ngrok.app"
HTTP_USER_AGENT 
"Zapier"
HTTP_X_FORWARDED_FOR 
"44.200.173.12"
HTTP_X_FORWARDED_HOST 
"andrew.dev.exacthire.ngrok.app"
HTTP_X_FORWARDED_PROTO 
"https"
HTTP_X_SUBDOMAIN 
"sandboxclient"
OPENSEARCH_HOST 
"http://opensearch:9200"
OPENSEARCH_INDEX 
"applications"
PATH 
"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin"
PHPIZE_DEPS 
"autoconf \t\tdpkg-dev \t\tfile \t\tg++ \t\tgcc \t\tlibc-dev \t\tmake \t\tpkg-config \t\tre2c"
PHP_ASC_URL 
"https://www.php.net/distributions/php-8.1.34.tar.xz.asc"
PHP_CFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_CPPFLAGS 
"-fstack-protector-strong -fpic -fpie -O2 -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64"
PHP_INI_DIR 
"/usr/local/etc/php"
PHP_LDFLAGS 
"-Wl,-O1 -pie"
PHP_SELF 
"/index.php"
PHP_SHA256 
"ffa9e0982e82eeaea848f57687b425ed173aa278fe563001310ae2638db5c251"
PHP_URL 
"https://www.php.net/distributions/php-8.1.34.tar.xz"
PHP_VERSION 
"8.1.34"
PWD 
"/var/www/exacthire-web"
QUERY_STRING 
"subdomain=sandboxclient"
REDIRECT_STATUS 
"200"
REMOTE_ADDR 
"172.22.0.1"
REMOTE_PORT 
"49208"
REMOTE_USER 
""
REQUEST_METHOD 
"POST"
REQUEST_SCHEME 
"http"
REQUEST_TIME 
1790625751
REQUEST_TIME_FLOAT 
1790625751.7141
REQUEST_URI 
"/api/public/oauth/token?subdomain=sandboxclient"
SCRIPT_FILENAME 
"/var/www/exacthire-web/public/index.php"
SCRIPT_NAME 
"/index.php"
SERVER_ADDR 
"172.22.0.5"
SERVER_NAME 
""
SERVER_PORT 
"8081"
SERVER_PROTOCOL 
"HTTP/1.1"
SERVER_SOFTWARE 
"nginx/1.26.3"
SHLVL 
"0"
SYMFONY_DOTENV_VARS 
"APP_SECRET,JWT_SECRET_KEY,JWT_PUBLIC_KEY,JWT_PASSPHRASE,DATABASE_URL,CORS_ALLOW_ORIGIN,DEV_FE_PORT,DEV_API_PORT,TUNNEL_BASE_URL,GOOGLE_API_KEY,GOOGLE_CLIENT_ID,GOOGLE_CLIENT_SECRET,OPENSEARCH_SIGV4_REGION"
TIKA_HOST 
"http://tika:9998"
USER 
"www-data"
_ 
"/usr/local/sbin/php-fpm"
argc 
1
argv 
[
  "subdomain=sandboxclient"
]