Error 403 Forbidden

PATCH https://www.all4team.de/api/product-media/019d0d8a3a6072ca82b96afe7c7931b7?_response=detail

ApiController :: update

Request

GET Parameters

Key Value
_response
"detail"

POST Parameters

Key Value
mediaId
"35c5036e08014f6686fcdf4cac97d65c"
position
1
productId
"0190e4890fc871f4b1bb97f108e47bae"

Uploaded Files

No files were uploaded

Request Attributes

Key Value
_controller
"Shopware\Core\Framework\Api\Controller\ApiController::update"
_cspNonce
"cLH79kNMqf8="
_route
"api.product_media.update"
_routeScope
[
  "api"
]
_route_params
[
  "entityName" => "product-media"
  "path" => "019d0d8a3a6072ca82b96afe7c7931b7"
]
_stopwatch_token
"51482d"
entityName
"product-media"
oauth_access_token_id
"b3c986849f4ca906589813e600035aaa7b11e196bcd874650a18feb9b7e4c83772b85523f31f069a"
oauth_client_id
"SWIABJLLUHDXAFVVREDNBEDDZG"
oauth_scopes
[
  "write"
]
oauth_user_id
""
path
"019d0d8a3a6072ca82b96afe7c7931b7"
sw-context
Shopware\Core\Framework\Context {#1686
  #extensions: []
  #languageIdChain: [
    "2fbb5fe2e29a4d70aa5854ce7ce3e20b"
  ]
  #scope: "user"
  #rulesLocked: false
  #source: Shopware\Core\Framework\Api\Context\AdminApiSource {#1699 …}
  #ruleIds: []
  #currencyId: "b7d2554b0ce847cd82f3ac9bd1c0dfca"
  #versionId: "0fa91ce3e96a4bc2be4bd9ce752c3425"
  #currencyFactor: 1.0
  #considerInheritance: false
  #taxState: "gross"
  #rounding: Shopware\Core\Framework\DataAbstractionLayer\Pricing\CashRoundingConfig {#1687 …}
  #states: []
}

Request Headers

Header Value
accept
"application/vnd.api+json"
authorization
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJTV0lBQkpMTFVIRFhBRlZWUkVETkJFRERaRyIsImp0aSI6ImIzYzk4Njg0OWY0Y2E5MDY1ODk4MTNlNjAwMDM1YWFhN2IxMWUxOTZiY2Q4NzQ2NTBhMThmZWI5YjdlNGM4Mzc3MmI4NTUyM2YzMWYwNjlhIiwiaWF0IjoxNzc0MDY4ODk1LjMyOTQ2NywibmJmIjoxNzc0MDY4ODk1LjMyOTQ2OCwiZXhwIjoxNzc0MDY5NDk1LjMyOTI5Nywic3ViIjoiIiwic2NvcGVzIjpbIndyaXRlIl19.xGKZrOzlUSK9_te56UEhQC5RYvmtPsnsEbgeCzoTfkg9YEzi5nDJB2Ta25FuGptef5ZG11lk3XajwcffMRCGvIlvpFP2-izKuGIb_DGxXQ8l7UEHkhpb52_kVtTQia2JWA3tymIXsXc7cLcOD6Q8vLdE6SBH_V7MBAMxNwJDZ_nWtoGQU742X2fyz7ySNlZXX0mVSzqr6Jm8zu1PXb5bW5hx2wJHGHeKk8U-sW9XthjPGNttFapT7IyGwB-Oa0muT0KZN_voms0UJ1KoN1488awGPW6c6hvpnmKwEOugQ668ODqJiU-viOf8O1vFjFV_ZvEnvR8yyyNAdTq8msXQ9Q"
content-length
"106"
content-type
"application/json"
forwarded
"for="176.52.247.29";host="www.all4team.de";proto=https"
host
"www.all4team.de"
surrogate-capability
"symfony="ESI/1.0""
user-agent
"GuzzleHttp/7"
x-forwarded-for
"176.52.247.29"
x-php-ob-level
"1"

Request Content

Pretty

{
    "productId": "0190e4890fc871f4b1bb97f108e47bae",
    "mediaId": "35c5036e08014f6686fcdf4cac97d65c",
    "position": 1
}

Raw

{"productId":"0190e4890fc871f4b1bb97f108e47bae","mediaId":"35c5036e08014f6686fcdf4cac97d65c","position":1}

Response

Response Headers

Header Value
access-control-allow-headers
"Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,indexing-behavior,sw-include-seo-urls"
access-control-allow-methods
"GET,POST,PUT,PATCH,DELETE"
access-control-allow-origin
"*"
access-control-expose-headers
"Content-Type,Authorization,sw-context-token,sw-access-key,sw-language-id,sw-version-id,sw-inheritance,indexing-behavior,sw-include-seo-urls"
cache-control
"no-cache, private"
content-type
"application/json"
date
"Sat, 21 Mar 2026 04:56:20 GMT"
server-timing
""
x-debug-token
"5649d8"

Cookies

Request Cookies

No request cookies

Response Cookies

No response cookies

Session

Session Metadata

No session metadata

Session Attributes

No session attributes

Session Usage

0 Usages
Stateless check enabled

Session not used.

Flashes

Flashes

No flash messages were created.

Server Parameters

Server Parameters

Defined in .env

Key Value
APP_ENV
"dev"
APP_SECRET
"def000008bb8000e28e56921695e4fab65ec11af451433022ec1898934e462c2d3743daf8028d3c0c4cb59122d1bc8d5b6e9c2842a524d189be6ebabe2ad98c23284e051"
APP_URL
"https://www.all4team.de"
APP_URL_CHECK_DISABLED
"1"
BLUE_GREEN_DEPLOYMENT
"0"
COMPOSER_HOME
"/var/www/vhosts/all4team/html/var/cache/composer"
DATABASE_URL
"mysql://all4team:yae3tahmao0ish3ia4gahchaaP4Oog3g@127.0.0.1/all4team_shopware?unix_socket=/var/run/mysqld/mysqld.sock"
INSTANCE_ID
"BFKxCkV57SvEYj2V9nBRJcfYYcDBNhBl"
LOCK_DSN
"flock"
MAILER_DSN
"native://default"
MAILER_URL
"null://null"
MESSENGER_TRANSPORT_DSN
"amqp://all4team:eeHiazoh4neizie0eifahwah0chohb3e@localhost:5672/%2fall4team/messages"
OPENSEARCH_URL
"localhost:9200"
PROXY_URL
"http://localhost"
SHOPWARE_CACHE_ID
"a4t"
SHOPWARE_CDN_STRATEGY_DEFAULT
"id"
SHOPWARE_ES_ENABLED
"1"
SHOPWARE_ES_INDEXING_ENABLED
"1"
SHOPWARE_ES_INDEX_PREFIX
"sw_all4team"
SHOPWARE_ES_THROW_EXCEPTION
"1"
SHOPWARE_HTTP_CACHE_ENABLED
"1"
SHOPWARE_HTTP_DEFAULT_TTL
"7200"
SQL_SET_DEFAULT_SESSION_VARIABLES
"0"

Defined as regular env variables

Key Value
APP_DEBUG
"1"
CONTENT_LENGTH
"106"
CONTENT_TYPE
"application/json"
DOCUMENT_ROOT
"/var/www/vhosts/all4team/html/public"
HTTPS
"on"
HTTP_ACCEPT
"application/vnd.api+json"
HTTP_AUTHORIZATION
"Bearer eyJ0eXAiOiJKV1QiLCJhbGciOiJSUzI1NiJ9.eyJhdWQiOiJTV0lBQkpMTFVIRFhBRlZWUkVETkJFRERaRyIsImp0aSI6ImIzYzk4Njg0OWY0Y2E5MDY1ODk4MTNlNjAwMDM1YWFhN2IxMWUxOTZiY2Q4NzQ2NTBhMThmZWI5YjdlNGM4Mzc3MmI4NTUyM2YzMWYwNjlhIiwiaWF0IjoxNzc0MDY4ODk1LjMyOTQ2NywibmJmIjoxNzc0MDY4ODk1LjMyOTQ2OCwiZXhwIjoxNzc0MDY5NDk1LjMyOTI5Nywic3ViIjoiIiwic2NvcGVzIjpbIndyaXRlIl19.xGKZrOzlUSK9_te56UEhQC5RYvmtPsnsEbgeCzoTfkg9YEzi5nDJB2Ta25FuGptef5ZG11lk3XajwcffMRCGvIlvpFP2-izKuGIb_DGxXQ8l7UEHkhpb52_kVtTQia2JWA3tymIXsXc7cLcOD6Q8vLdE6SBH_V7MBAMxNwJDZ_nWtoGQU742X2fyz7ySNlZXX0mVSzqr6Jm8zu1PXb5bW5hx2wJHGHeKk8U-sW9XthjPGNttFapT7IyGwB-Oa0muT0KZN_voms0UJ1KoN1488awGPW6c6hvpnmKwEOugQ668ODqJiU-viOf8O1vFjFV_ZvEnvR8yyyNAdTq8msXQ9Q"
HTTP_FORWARDED
"for="176.52.247.29";host="www.all4team.de";proto=https"
HTTP_HOST
"www.all4team.de"
HTTP_USER_AGENT
"GuzzleHttp/7"
HTTP_X_FORWARDED_FOR
"176.52.247.29"
LSWS_EDITION
"Openlitespeed 1.8.2"
PATH
"/bin:/usr/bin"
PHP_SELF
"/index.php"
QUERY_STRING
"_response=detail"
REDIRECT_QUERY_STRING
"_response=detail"
REDIRECT_STATUS
"200"
REDIRECT_URL
"/api/product-media/019d0d8a3a6072ca82b96afe7c7931b7"
REMOTE_ADDR
"127.0.0.1"
REMOTE_PORT
"19040"
REQUEST_METHOD
"PATCH"
REQUEST_TIME
1774068980
REQUEST_TIME_FLOAT
1774068980.1516
REQUEST_URI
"/api/product-media/019d0d8a3a6072ca82b96afe7c7931b7?_response=detail"
SCRIPT_FILENAME
"/var/www/vhosts/all4team/html/public/index.php"
SCRIPT_NAME
"/index.php"
SERVER_ADDR
"37.221.195.102"
SERVER_ADMIN
""
SERVER_NAME
"www.all4team.de"
SERVER_PORT
"443"
SERVER_PROTOCOL
"HTTP/1.1"
SERVER_SOFTWARE
"LiteSpeed"
SSL_CIPHER
"TLS_AES_256_GCM_SHA384"
SSL_CIPHER_ALGKEYSIZE
"256"
SSL_CIPHER_USEKEYSIZE
"256"
SSL_PROTOCOL
"TLSv1.3"
SYMFONY_DOTENV_PATH
"/var/www/vhosts/all4team/html/.env"
SYMFONY_DOTENV_VARS
"APP_ENV,APP_URL,APP_SECRET,INSTANCE_ID,BLUE_GREEN_DEPLOYMENT,DATABASE_URL,MAILER_URL,OPENSEARCH_URL,SHOPWARE_ES_ENABLED,SHOPWARE_ES_INDEXING_ENABLED,SHOPWARE_ES_INDEX_PREFIX,SHOPWARE_ES_THROW_EXCEPTION,PROXY_URL,SHOPWARE_HTTP_CACHE_ENABLED,SHOPWARE_HTTP_DEFAULT_TTL,LOCK_DSN,APP_URL_CHECK_DISABLED,SHOPWARE_CDN_STRATEGY_DEFAULT,MESSENGER_TRANSPORT_DSN,MAILER_DSN,COMPOSER_HOME,SQL_SET_DEFAULT_SESSION_VARIABLES,SHOPWARE_CACHE_ID"
X-LSCACHE
"on,crawler"