steal restaurant pics from Beli? #783

Open
opened 2026-03-04 03:09:55 +00:00 by cirex-web · 2 comments
cirex-web commented 2026-03-04 03:09:55 +00:00 (Migrated from github.com)
No description provided.
cirex-web commented 2026-03-04 03:18:48 +00:00 (Migrated from github.com)

get photos based on location id

curl -k -X GET -H "Origin: capacitor://localhost" -H "Host: backoffice-service-onboarding-t57o3dxfca-nn.a.run.app" -H "Accept-Language: ja" -H "User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" -H "Sec-Fetch-Site: cross-site" -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzcyNTk1MDc2LCJpYXQiOjE3NzI1OTI2NzUsImp0aSI6IjQxOWY2MTAzZjcyZDQxMWI4MTQ4MmExYzE4ZjQ5ODA0IiwidXNlcl9pZCI6IjFhODgxZmNiLTk5YTktNDRjNi1hNjAyLTcyMTc4ZmJhYzlhMCJ9.3qb4JfAoJu7tY4o5DIvaBG95AjZBRU_LDtz6v0u62B4" -H "Sec-Fetch-Mode: cors" -H "Sec-Fetch-Dest: empty" -H "Connection: keep-alive" -H "Accept-Encoding: gzip, deflate, br" -H "Accept: application/json" "https://backoffice-service-onboarding-t57o3dxfca-nn.a.run.app/api/members-business-photo/1217141/?&version=8.3.4&menu_vibes=true"

what are menu_vibes lmao

get photos based on location id curl -k -X GET -H "Origin: capacitor://localhost" -H "Host: backoffice-service-onboarding-t57o3dxfca-nn.a.run.app" -H "Accept-Language: ja" -H "User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" -H "Sec-Fetch-Site: cross-site" -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzcyNTk1MDc2LCJpYXQiOjE3NzI1OTI2NzUsImp0aSI6IjQxOWY2MTAzZjcyZDQxMWI4MTQ4MmExYzE4ZjQ5ODA0IiwidXNlcl9pZCI6IjFhODgxZmNiLTk5YTktNDRjNi1hNjAyLTcyMTc4ZmJhYzlhMCJ9.3qb4JfAoJu7tY4o5DIvaBG95AjZBRU_LDtz6v0u62B4" -H "Sec-Fetch-Mode: cors" -H "Sec-Fetch-Dest: empty" -H "Connection: keep-alive" -H "Accept-Encoding: gzip, deflate, br" -H "Accept: application/json" "https://backoffice-service-onboarding-t57o3dxfca-nn.a.run.app/api/members-business-photo/1217141/?&version=8.3.4&menu_vibes=true" what are menu_vibes lmao
cirex-web commented 2026-03-04 03:24:36 +00:00 (Migrated from github.com)

curl -k -X POST -H "Content-Type: application/json" -H "Connection: keep-alive" -H "Content-Length: 58" -H "Accept: application/json" -H "Accept-Language: ja" -H "User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" -H "Accept-Encoding: gzip, deflate, br" -H "Host: backoffice-service-split-t57o3dxfca-nn.a.run.app" -H "Sec-Fetch-Dest: empty" -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzcyNTk1MDc2LCJpYXQiOjE3NzI1OTI2NzUsImp0aSI6IjQxOWY2MTAzZjcyZDQxMWI4MTQ4MmExYzE4ZjQ5ODA0IiwidXNlcl9pZCI6IjFhODgxZmNiLTk5YTktNDRjNi1hNjAyLTcyMTc4ZmJhYzlhMCJ9.3qb4JfAoJu7tY4o5DIvaBG95AjZBRU_LDtz6v0u62B4" -H "Sec-Fetch-Mode: cors" -H "Origin: capacitor://localhost" -H "Sec-Fetch-Site: cross-site" -d "{"password":"[REDACTED PASSWORD]","email":"[REDACTED EMAIL]"}" "https://backoffice-service-split-t57o3dxfca-nn.a.run.app/api/token/"

why is the email and password being sent to refresh the access token???

curl -k -X POST -H "Content-Type: application/json" -H "Connection: keep-alive" -H "Content-Length: 58" -H "Accept: application/json" -H "Accept-Language: ja" -H "User-Agent: Mozilla/5.0 (iPhone; CPU iPhone OS 18_6_2 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Mobile/15E148" -H "Accept-Encoding: gzip, deflate, br" -H "Host: backoffice-service-split-t57o3dxfca-nn.a.run.app" -H "Sec-Fetch-Dest: empty" -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJ0b2tlbl90eXBlIjoiYWNjZXNzIiwiZXhwIjoxNzcyNTk1MDc2LCJpYXQiOjE3NzI1OTI2NzUsImp0aSI6IjQxOWY2MTAzZjcyZDQxMWI4MTQ4MmExYzE4ZjQ5ODA0IiwidXNlcl9pZCI6IjFhODgxZmNiLTk5YTktNDRjNi1hNjAyLTcyMTc4ZmJhYzlhMCJ9.3qb4JfAoJu7tY4o5DIvaBG95AjZBRU_LDtz6v0u62B4" -H "Sec-Fetch-Mode: cors" -H "Origin: capacitor://localhost" -H "Sec-Fetch-Site: cross-site" -d "{\"password\":\"[REDACTED PASSWORD]\",\"email\":\"[REDACTED EMAIL]\"}" "https://backoffice-service-split-t57o3dxfca-nn.a.run.app/api/token/" why is the email and password being sent to refresh the access token???
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
ScottyLabs/eats#783
No description provided.