}
                processRequest(request, response, path);
            }).orElse(() -> {
                throw new WebApiException(HttpServletResponse.SC_FORBIDDEN, "Invalid session.");
            });
        } catch (final WebApiException e) {
            String message;
            if (Constants.TRUE.equalsIgnoreCase(ComponentUtil.getFessConfig().getApiJsonResponseExceptionIncluded())) {

        // Note: WebApiException constructor calls e.getMessage() on null exception, causing NullPointerException
        try {
            WebApiUtil.setError(500, (Exception) null);
            fail("setError should throw NullPointerException when passed null exception");
        } catch (NullPointerException e) {
            // Expected - WebApiException constructor cannot handle null exception