ZAP API Scan Report

- Site: [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca)
**New Alerts**
- **A Server Error response code was returned by the server** [100000] total: 1:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **Cookie with SameSite Attribute None** [10054] total: 14:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID?includeDocData=Y](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID?includeDocData=Y)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange?contactIdentifier=contactIdentifier&secureExchangeContactTypeCode=secureExchangeContactTypeCode](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange?contactIdentifier=contactIdentifier&secureExchangeContactTypeCode=secureExchangeContactTypeCode)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/users?digitalId=digitalId&schoolID=schoolID&firstName=firstName&lastName=lastName&districtID=districtID](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/users?digitalId=digitalId&schoolID=schoolID&firstName=firstName&lastName=lastName&districtID=districtID)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- ..
- **Information Disclosure - Debug Error Messages** [10023] total: 1:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- **Unexpected Content-Type was returned** [100001] total: 3:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca?aaa=bbb](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca?aaa=bbb)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca?class.module.classLoader.DefaultAssertionStatus=nonsense)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/latest/meta-data/)
- **A Client Error response code was returned by the server** [100000] total: 3368:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/id](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/id)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/id/](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/id/)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID/](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID/)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeId/notes/secureExchangeNoteId](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeId/notes/secureExchangeNoteId)
- ..
- **Non-Storable Content** [10049] total: 12:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID?includeDocData=Y](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID?includeDocData=Y)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange?contactIdentifier=contactIdentifier&secureExchangeContactTypeCode=secureExchangeContactTypeCode](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange?contactIdentifier=contactIdentifier&secureExchangeContactTypeCode=secureExchangeContactTypeCode)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange)
- ..
- **Session Management Response Identified** [10112] total: 13:
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID?includeDocData=Y](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange/secureExchangeID/documents/documentID?includeDocData=Y)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange?contactIdentifier=contactIdentifier&secureExchangeContactTypeCode=secureExchangeContactTypeCode](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/exchange?contactIdentifier=contactIdentifier&secureExchangeContactTypeCode=secureExchangeContactTypeCode)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/users?digitalId=digitalId&schoolID=schoolID&firstName=firstName&lastName=lastName&districtID=districtID](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/api/v1/edx/users?digitalId=digitalId&schoolID=schoolID&firstName=firstName&lastName=lastName&districtID=districtID)
- [https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs](https://edx-api-d4cdde-dev.apps.silver.devops.gov.bc.ca/v3/api-docs)
- ..

View the [following link](https://github.com/bcgov/EDUC-EDX-API/actions/runs/6973260816) to download the report.
RunnerID:6973260816

Review the ZAP API Scan report from GitHub Actions run 6973260816, starting with the listed new alerts and affected API endpoints. Trace the server errors, cookie SameSite findings, debug messages, content types, and session responses; done means the relevant findings are resolved or explicitly assessed in a follow-up scan.

Written by the indexing model from the issue text.