Request Head:

POST /sign_in HTTP/1.1
Host: account.envato.com
Connection: keep-alive
Content-Length: 45
Accept: application/json
Origin: https://codecanyon.net
Save-Data: on
User-Agent: Mozilla/5.0 (Linux; Android 7.0; Redmi Note 4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.90 Mobile Safari/537.36
X-Request-Id: 19567151-a985-480c-9675-02d4fbd6d0f8
Content-type: application/x-www-form-urlencoded
Referer: https://codecanyon.net/
Accept-Encoding: gzip, deflate, br
Accept-Language: en-IN,en-GB;q=0.9,en-US;q=0.8,en;q=0.7,hi;q=0.6
Cookie: __cfduid=d4804ed30a24a7806cc6e463e48b8b5d01555912137; referring_client=codecanyon; cookie_for_safari_third_party_cookie_workaround=is+set%21


Body:

username=Jsjdjd&password=sydhdh&to=codecanyon

Response Head:

HTTP/1.1 200 OK
Date: Mon, 22 Apr 2019 06:22:10 GMT
Content-Type: application/json; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: POST, OPTIONS
Access-Control-Allow-Origin: https://codecanyon.net
Access-Control-Expose-Headers:
Access-Control-Max-Age: 1728000
Cache-Control: max-age=0, private, must-revalidate
Content-Security-Policy: default-src 'self' https://d13rsk0hbia94w.cloudfront.net; style-src 'self' https://d13rsk0hbia94w.cloudfront.net https://public-assets.envato-static.com 'unsafe-inline'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://d13rsk0hbia94w.cloudfront.net https://ssl.google-analytics.com https://www.google-analytics.com https://www.google.com/recaptcha/ https://www.google.com/js/ https://www.gstatic.com/recaptcha/ https://apis.google.com https://ssl.gstatic.com/ https://*.newrelic.com https://bam.nr-data.net https://d1q62gfb8siqnm.cloudfront.net https://consent.cookiebot.com https://consentcdn.cookiebot.com; img-src 'self' data: https://d13rsk0hbia94w.cloudfront.net https://ssl.google-analytics.com https://www.google-analytics.com https://*.googleapis.com https://www.google.com/recaptcha/ https://www.google.com/js/ https://www.gstatic.com/recaptcha/ https://apis.google.com https://ssl.gstatic.com/ https://*.newrelic.com https://bam.nr-data.net; frame-src https://www.google.com/recaptcha/ https://consentcdn.cookiebot.com; connect-src 'self' https://bam.nr-data.net; report-uri /csp_reports; frame-ancestors https://codecanyon.net
ETag: W/"b4230f329a0e5e54db074365f8682105"
P3P: CP='This is not a P3P policy'
Vary: Origin
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-Request-Id: 19567151-a985-480c-9675-02d4fbd6d0f8
X-Runtime: 0.113777
X-XSS-Protection: 1; mode=block
Expect-CT: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Server: cloudflare
CF-RAY: 4cb5806ed86b8a7f-BOM
Content-Encoding: gzip


Body:

{
	"state":"password",
	"error_message":"Looks like these are not your correct details. Please try again.",
	"parent_redirects_allowed_when_embedded":false,
	"is_embedded_req":null
}