# 01a1c5f0-c745-74d5-aa61-9c6046004258  2026-11-10 14:50:51  curl_cffi.requests/hunter-1  status=500  2043ms
POST https://mein-portal.baloise.de/auth/rest/public/baloise/saml2/transform
--- request (14750 B application/x-www-form-urlencoded)
POST /auth/rest/public/baloise/saml2/transform HTTP/1.1
Host: mein-portal.baloise.de
Cookie: CSRFT759-S=vGOsn8OM9Mv1IA_exbbTVg; AL_SESS-S=Ab8qMp1CD9oKvWeC7E3seWxzJdHq9elyvDHG5Gs3DRlQ_yItoTxt0u9bvFaJu3bt!o3Z
sec-ch-ua: "Not;A=Brand";v="8", "Chromium";v="150", "Google Chrome";v="150"
sec-ch-ua-mobile: ?0
sec-ch-ua-platform: "macOS"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/150.0.0.0 Safari/537.36
Accept: application/json, application/vnd.api+json
Sec-Fetch-Site: none
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate, br, zstd
Accept-Language: en-US,en;q=0.9
X-Bug-Bounty: BBS:dwbzn
Content-Type: application/x-www-form-urlencoded
X-Same-Domain: 1
X-CSRFT759: vGOsn8OM9Mv1IA_exbbTVg
Content-Length: 13877

context=Easylogin&SAMLResponse=PD94bWwgdmVyc2lvbj0nMS4wJyBlbmNvZGluZz0nVVRGLTgnPz4KPHNhbWxwOlJlc3BvbnNlIHhtbG5zOnNhbWxwPSJ1cm46b2FzaXM6bmFtZXM6dGM6U0FNTDoyLjA6cHJvdG9jb2wiIHhtbG5zOnNhbWw9InVybjpvYXNpczpuYW1lczp0YzpTQU1MOjIuMDphc3NlcnRpb24iIHhtbG5zOmRzPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwLzA5L3htbGRzaWcjIiB4bWxuczp4ZW5jPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyMiIElEPSJfci1iYWFhNjBlMmZkMTU0OGZkYTVhMmViM2UyMTNjNTMxZSIgVmVyc2lvbj0iMi4wIiBJc3N1ZUluc3RhbnQ9IjIwMjYtMTEtMTBUMTQ6NTA6NTFaIiBEZXN0aW5hdGlvbj0iaHR0cHM6Ly9tZWluLXBvcnRhbC5iYWxvaXNlLmRlL2F1dGgvcmVzdC9wdWJsaWMvYmFsb2lzZS9zYW1sMi90cmFuc2Zvcm0iPjxzYW1sOklzc3Vlcj5odHRwczovL3BvcnRhbC5lYXN5LWxvZ2luLmRlL2F1dGgtcG9ydGFsPC9zYW1sOklzc3Vlcj48ZHM6U2lnbmF0dXJlPjxkczpTaWduZWRJbmZvPjxkczpDYW5vbmljYWxpemF0aW9uTWV0aG9kIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8%2BPGRzOlNpZ25hdHVyZU1ldGhvZCBBbGdvcml0aG09Imh0dHA6Ly93d3cudzMub3JnLzIwMDEvMDQveG1sZHNpZy1tb3JlI3JzYS1zaGEyNTYiLz48ZHM6UmVmZXJlbmNlIFVSST0iI19yLWJhYWE2MGUyZmQxNTQ4ZmRhNWEyZWIzZTIxM2M1MzFlIj48ZHM6VHJhbnNmb3Jtcz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMC8wOS94bWxkc2lnI2VudmVsb3BlZC1zaWduYXR1cmUiLz48ZHM6VHJhbnNmb3JtIEFsZ29yaXRobT0iaHR0cDovL3d3dy53My5vcmcvMjAwMS8xMC94bWwtZXhjLWMxNG4jIi8%2BPC9kczpUcmFuc2Zvcm1zPjxkczpEaWdlc3RNZXRob2QgQWxnb3JpdGhtPSJodHRwOi8vd3d3LnczLm9yZy8yMDAxLzA0L3htbGVuYyNzaGEyNTYiLz48ZHM6RGlnZXN0VmFsdWU%2BbE1YNW83WmlCNnh2UTdCQlJQdkI3OVo2VVpJWUVYV3ZVNUszOUpRSSs0bz08L2RzOkRpZ2VzdFZhbHVlPjwvZHM6UmVmZXJlbmNlPjwvZHM6U2lnbmVkSW5mbz48ZHM6U2lnbmF0dXJlVmFsdWU%2Bc3lEYzhyYmNNNDd5aVJMay9XMmhPU1pjZ2JrVlIwdTVFT2V3QmJsWjd4L1BRb1pjcDZkRE0yT00yUTRLRG01cXFnUitMUWpySVJiS3BmZWN4a3RVd0NERlRMOXJBT1daVWhkUkU3eEVUWTJEN1lHaXo0SUdxNXdvMlFacjNkZkt0eHZiZkFXamNMaG1SSWduckNGKzg5bzBGS3drczBwVWpSZEFTOXpLSmFja1ZZZmhTbXJybUVrM1c4SkhQTGs3cDlpU1NwTzNsQ2Fvc2t2OXlQMnlJR3VINlQ5SGZFT3d1dmFGZk1naUhUVHNlOWJxUjBORjg1dVJtbi90WTNFWk44dm9meDBIWVBFb3RIcEh6TXdWYnNobTlzVjNnWm9hQk9iZUxYTUk2WGV5akhZbTNsZUpidFhOaVg3S3VTcmdOb3VOL3czK2tPa2VtWHNDdit1bUhRPT08L2RzOlNpZ
…[+11877 body chars; --range 2873: or --grep TEXT]
--- response (891 B application/vnd.api+json)
HTTP/1.1 500 Internal Server Error
Date: Tue, 10 Nov 2026 14:50:51 GMT
Server: Apache
Content-Length: 132
Expires: 0
Last-Modified: Tue, 10 Nov 2026 14:50:51 GMT
Cache-Control: no-store, no-cache, must-revalidate
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Referrer-Policy: same-origin
Permissions-Policy: accelerometer=(self), ambient-light-sensor=(self), autoplay=(self), camera=(self), display-capture=(self), document-domain=(self), encrypted-media=(self), fullscreen=(self), geolocation=(self), gyroscope=(self), magnetometer=(self), microphone=(self), midi=(self), payment=(self), usb=(self), xr-spatial-tracking=(self)
Connection: close
Content-Type: application/vnd.api+json

{"meta":{"type":"jsonapi.metadata.document","timestamp":"2026-11-10T15:50:51.682+01:00"},"errors":[{"id":"1681:3368","status":500}]}