The simpler version I like is when you get stuck, write down why you're stuck and _why what you're doing should've worked_. Usually that's enough to find an inc

The simpler version I like is when you get stuck, write down why you're stuck and _why what you're doing should've worked_. Usually that's enough to find an incorrect assumption and make traction. Like you're calling the API and passing the credentials when it expects you to have a cookie set. The API should work because the endpoint is correct and I'm passing user/pass as parameters. You can then validate that the endpoint is correct but when you go to validate the parameters you'll notice its supposed to be a cookie.