2019-08-05, 06:09 PM
For your usage, pretty much every call needs a "&sid=481e61328cc54915aa67639973969460" type parameter on the url. If it's not on the url, the application falls back to checking the user's session for the sid, which is how the web app appears to make these api calls without explicitly passing it.