Looks like your API is playing a risky game with HTTP basic auth and undefined error responses. Time to step up your error game and secure those endpoints!