ORESTAR public-interface reference
Search observed routes, methods, parameters and response types. Reconstructed from public pages—not an official or exhaustive API specification.
42 matching non-asset routes; 66 observed routes/assets overall; 26 captured page states.
For local lookup: npm run orestar:api -- transaction. Add --json for the complete observed fields and evidence. The command makes no network requests.
Method unverified /orestar/ajaxdataserver/findOfficeForOfficeGrp — observed reference only
No network response captured by this survey.
Observed query keys: officeGroupselected, elecYear, cfElecRsn
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/ajaxdataserver/getCandidateElectionByYear — response observed
Observed responses: 200 text/xml; charset=UTF-8; 200 text/html
Observed query keys: elecYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/ajaxdataserver/getCFOfficeGrpsByElection — response observed
Observed responses: 200 text/html
Observed query keys: elecRsn, elecYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getElectionBySpecificYearMeasure — observed reference only
No network response captured by this survey.
Observed query keys: ajaxElectionYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getElectionByYear — observed reference only
No network response captured by this survey.
Observed query keys: elecYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getHelpTextByCode — observed reference only
No network response captured by this survey.
Observed query keys: code
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/ajaxdataserver/getLocalMeasureElectionByYear — response observed
Observed responses: 200 text/xml; charset=UTF-8
Observed query keys: elecYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/ajaxdataserver/getLocalMeasureNumber — response observed
Observed responses: 200 text/html; 200 text/xml; charset=UTF-8
Observed query keys: county, elecYear, election, searchYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getMeasureByElectionRsn — observed reference only
No network response captured by this survey.
Observed query keys: ajaxElectionRsn
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getOfficeByOfficeGrp — observed reference only
No network response captured by this survey.
Observed query keys: officeGrp
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getPetitionBySpecificYear — observed reference only
No network response captured by this survey.
Observed query keys: ajaxElectionYear
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/ajaxdataserver/getTransactionSubTypesAllValid — observed reference only
No network response captured by this survey.
Observed query keys: tranType
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/amendceWorkQueueListAction.do — observed reference only
No network response captured by this survey.
Observed query keys: tranRsn
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST /orestar/cfFilings.do — response observed
Observed responses: 200 text/html
Observed query keys: none
POST form controls
cfSearchButtonNamecfNamecfyearActivecfElectioncfOfficecfOfficeGrpcfPartyAffiliationcfDisqualifiedCandidatescfFilingTypecfFilingFromDateFilingFromDatecfFilingToDateFilingToDatecfWithDrawFromDateWithDrawalFromDatecfWithDrawToDateWithDrawalToDateOWASP_CSRFTOKEN
POST form controls
cfSearchButtonNamecfNamecfyearActivecfElectioncfOfficecfOfficeGrpcfPartyAffiliationcfDisqualifiedCandidatescfFilingTypecfFilingFromDateFilingFromDatecfFilingToDateFilingToDatecfWithDrawFromDateWithDrawalFromDatecfWithDrawToDateWithDrawalToDateOWASP_CSRFTOKEN
POST form controls
cfSearchButtonNamecfNamecfyearActivecfElectioncfOfficecfOfficeGrpcfPartyAffiliationcfDisqualifiedCandidatescfFilingTypecfFilingFromDateFilingFromDatecfFilingToDateFilingToDatecfWithDrawFromDateWithDrawalFromDatecfWithDrawToDateWithDrawalToDateOWASP_CSRFTOKEN
POST form controls
cfSearchButtonNamecfNamecfyearActivecfElectioncfOfficecfOfficeGrpcfPartyAffiliationcfDisqualifiedCandidatescfFilingTypecfFilingFromDateFilingFromDatecfFilingToDateFilingToDatecfWithDrawFromDateWithDrawalFromDatecfWithDrawToDateWithDrawalToDateOWASP_CSRFTOKEN
POST form controls
cfSearchButtonNamecfNamecfyearActivecfElectioncfOfficecfOfficeGrpcfPartyAffiliationcfDisqualifiedCandidatescfFilingTypecfFilingFromDateFilingFromDatecfFilingToDateFilingToDatecfWithDrawFromDateWithDrawalFromDatecfWithDrawToDateWithDrawalToDateOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/CFSearchPage.do — page loaded
Observed responses: 200 text/html; 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/cneCertificateSearch.do — page loaded
Observed responses: 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN, by, cneCertificateSearchButtonName, search, srtOrder, yearSelected
GET form controls
srtOrderbycneCertificateSearchButtonNameyearSelectedsearchOWASP_CSRFTOKEN
GET form controls
srtOrderbycneCertificateSearchButtonNameyearSelectedsearchOWASP_CSRFTOKEN
GET form controls
srtOrderbycneCertificateSearchButtonNameyearSelectedsearchOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/cneSearch.do — page loaded
Observed responses: 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN, cneSearchButtonName, cneSearchFilerCommitteeId, cneSearchContributorTxt, cneSearchContributorTxtSearchType, cneSearchContributorType, cneSearchFilerCommitteeRsn, cneSearchFilerCommitteeTxt, cneSearchFilerCommitteeTxtSearchType, cneSearchTranAmountFrom, cneSearchTranAmountTo, cneSearchTranEndDate, cneSearchTranStartDate, cneSearchTranType, search
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST / GET /orestar/CommitteeSearchFirstPage.do — page loaded
Observed responses: 200 text/html;charset=utf-8
Observed query keys: none
POST form controls
buttonNamepagecommitteeNamecommitteeNameMultiboxTextcommitteeIdpersonfirstNamefirstNameMultiboxTextlastNamelastNameMultiboxTextdiscontinuedSOOsubmitapprovedSOOpendingApprovalSOOinsufficientSOOresolvedSOOrejectedSOOOWASP_CSRFTOKEN
POST form controls
buttonNamepagecommitteeNamecommitteeNameMultiboxTextcommitteeIdpersonfirstNamefirstNameMultiboxTextlastNamelastNameMultiboxTextdiscontinuedSOOsubmitapprovedSOOpendingApprovalSOOinsufficientSOOresolvedSOOrejectedSOOOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST /orestar/CommitteeSearchSecondPage.do — observed reference only
No network response captured by this survey.
Observed query keys: none
POST form controls
yearActiveelectionfilerTypecommitteeOfficelocationLevelpartyAffiliationallCandidateConCommcontrolledCommCanLastNameallSlateMailerallIndpendFilersdiscontinuedSOOsearchresetapprovedSOOpendingApprovalSOOinsufficientSOOresolvedSOOrejectedSOObuttonNameOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/committeeSearchSOOHistory.do — page loaded
Observed responses: 200 text/html;charset=utf-8
Observed query keys: OWASP_CSRFTOKEN, committeeId
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST /orestar/CommitteeSearchThirdPage.do — observed reference only
No network response captured by this survey.
Observed query keys: none
POST form controls
measureYearelectionmeasureNumberreferendumYearreferendumNumberreferendumTitlerecallLastNamerecallLastNameTextrecallFirstNamerecallFirstNameTextdiscontinuedSOOsubmitapprovedSOOpendingApprovalSOOinsufficientSOOresolvedSOOrejectedSOObuttonNameOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/electionActivityLog.do — page loaded
Observed responses: 200 text/html;charset=utf-8
Observed query keys: OWASP_CSRFTOKEN, actionId
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/gotoLocalMeasSearch.do — page loaded
Observed responses: 200 text/html; 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/gotoPublicCertificateSearch.do — page loaded
Observed responses: 200 text/html; charset=UTF-8; 200 text/html
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET / POST /orestar/gotoPublicTransactionDetail.do — page loaded
Observed responses: 200 text/html; 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN, tranRsn
POST form controls
pubActionButtonNameOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/gotoPublicTransactionSearch.do — page loaded
Observed responses: 200 text/html; 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST / GET /orestar/gotoPublicTransactionSearchResults.do — observed reference only
No network response captured by this survey.
Observed query keys: OWASP_CSRFTOKEN, by, cneSearchButtonName, cneSearchFilerCommitteeId, srtOrder, ?srtOrder, cneSearchContributorTxtSearchType, cneSearchFilerCommitteeTxtSearchType, cneSearchPageIdx
POST form controls
cneSearchButtonNamecneSearchPageIdxcneSearchContributorTypeNamecneSearchTranTypeNamecneSearchTranSubTypeNamecneSearchTranPurposeNamesearchcneSearchFilerCommitteeIdcneSearchFilerCommitteeTxtcneSearchFilerCommitteeTxtSearchTypecneSearchTranStartDatestart_date_buttoncneSearchTranEndDateend_date_buttoncneSearchTranFiledStartDatefiledStartDatecneSearchTranFiledEndDatefiledEndDatetransactionIdcneSearchTranTypecneSearchTranSubTypecneSearchTranPurposecneSearchTranAmountFromcneSearchTranAmountTocneSearchInKindIndcneSearchIndependentIndviewDeletedTransactionsviewExpiredTransactionscneSearchContributorTxtcneSearchContributorTxtSearchTypecneSearchContributorTypeaddressLine1citystatezipzipPlusFouroccupationemployeremployerCityemployerStatenotEmployedselfEmployedOWASP_CSRFTOKEN
POST form controls
cneSearchButtonNamecneSearchPageIdxsrtOrderbynewSearchpreviousnextOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/GotoSearchByElection.do — page loaded
Observed responses: 200 text/html; 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/GotoSearchByMnP.do — page loaded
Observed responses: 200 text/html; 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/GotoSearchByName.do — page loaded
Observed responses: 200 text/html; 200 text/html;charset=utf-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST / GET /orestar/JavaScriptServlet — response observed
Observed responses: 200 text/plain; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST /orestar/localMeasureFile.do — observed reference only
No network response captured by this survey.
Observed query keys: none
POST form controls
modesearchButtonNamemeasSearchCriteriameasSearchPageIdxsrtOrderbymeasSearchYearelectionYearelectioncountymeasureNumberballotTitlepdfFileNamepreviousnextpageOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST / GET /orestar/LocalMeasures.do — page loaded
Observed responses: 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN, by, searchButtonName, srtOrder
POST form controls
measSearchYearbuttonNameelectionYearelectioncountymeasureNumberballotTitlesearchOWASP_CSRFTOKEN
POST form controls
measSearchYearbuttonNameelectionYearelectioncountymeasureNumberballotTitlesearchOWASP_CSRFTOKEN
POST form controls
measSearchYearbuttonNameelectionYearelectioncountymeasureNumberballotTitlesearchOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/measurePetition.do — observed reference only
No network response captured by this survey.
Observed query keys: measureId, petitionId
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/personAssocitedCommittee.do — page loaded
Observed responses: 200 text/html; charset=UTF-8
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/printerFriendly.do — observed reference only
No network response captured by this survey.
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET / POST /orestar/publicAccountSummary.do — page loaded
Observed responses: 200 text/html; charset=UTF-8; 200 text/html
Observed query keys: OWASP_CSRFTOKEN, filerId
POST form controls
buttonNameOWASP_CSRFTOKEN
POST form controls
buttonNameOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/SignOut.do — observed reference only
No network response captured by this survey.
Observed query keys: OWASP_CSRFTOKEN, mode
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
POST / GET /orestar/sooDetail.do — page loaded
Observed responses: 200 text/html;charset=utf-8
Observed query keys: OWASP_CSRFTOKEN, sooRsn, toPage, cneCommitteeId
POST form controls
ceAll01CommitteeCdOWASP_CSRFTOKEN
POST form controls
ceAll01CommitteeCdOWASP_CSRFTOKEN
POST form controls
ceAll01CommitteeCdOWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Method unverified /orestar/transactionReviewEditResultAction.do — observed reference only
No network response captured by this survey.
Observed query keys: tranRsn
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/vr/showVoterSearch.do — observed reference only
No network response captured by this survey.
Observed query keys: OWASP_CSRFTOKEN, lang, mode
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
GET /orestar/XcelCNESearch — observed reference only
No network response captured by this survey.
Observed query keys: OWASP_CSRFTOKEN
Use a fresh anonymous session and the current public form. Repeated names, disabled controls and dependent dropdown values must be preserved correctly. Saved tokens are never reusable configuration.
Coverage and failures
5 failure attempts are retained in the inventory, including transient transport errors and incomplete result workflows. A later successful page observation does not erase earlier failures. Candidate results, detailed independent-spending allocations and all dependent-selector combinations still require additional verification.
The Secretary of State publishes XML upload specifications for authorized filing. Those documents are not a demonstrated public bulk-read API. This map covers only the public surfaces actually observed.