}
                processRequest(request, response, path);
            }).orElse(() -> {
                throw new WebApiException(HttpServletResponse.SC_FORBIDDEN, "Invalid session.");
            });
        } catch (final WebApiException e) {
            final int statusCode = e.getStatusCode();
            String message;

        // Note: WebApiException constructor calls e.getMessage() on null exception, causing NullPointerException
        try {
            WebApiUtil.setError(500, (Exception) null);
            fail("setError should throw NullPointerException when passed null exception");
        } catch (NullPointerException e) {
            // Expected - WebApiException constructor cannot handle null exception