

/api/devices and /api/positions. When queried with the right credentials, these endpoints provide real-time bus positions that are then displayed by the site. Access required a valid JSESSIONID cookie, which was set by a /api/server request that needed a Referer header that included a specific token from the client. A subsequent request to /api/session?token=... validates the session.



Posted Oct 27, 2025
Developed a bot to monitor bus positions and infer routes and stops.
0
1
Oct 15, 2025 - Oct 16, 2025