protocols
Set of routines for building software
tools
History
First API Salesforce API, feb 7,2007
Life cycle of an API
Require specific rights or license
Private Complete internal usage based API
Ex:In house APIs
Available for everyone
Public /open available
Ex: Google APIs
API-Application program Type of API
interface Requires specific rights and shared with
multiple partners
Partner
Ex: Expedia , Amazon
Composite Combination related APIs
describe
produces
Ex: stripe API Reference OpenAPI Specification that
Consumes
API Documentation
Visualizes RESTful APIs and web services
Develop the documentation from the
postman collections reate a foundation of trust by
c
establishing a secure connection
It is a small data file that
Create cryptographically establishes a link b/w a
SSL Certificate
web server and browser
Configure
protects client-server communication
View Results from vulnerable attacks
Monitors
Delete Lightweight api that powers one wa data
sharing trigged by events
Used to set it up a scheduled interval and
that will run Also called revers api
Webhook APIs messages
If it a failure it will notify you
alerts
help to send
Based on a specification notification
Create from scratch to server to client
Add to existing collection
In some situations mock server behaves JavaScript Object Notation
like a real server
Mock server
Mocking
Open-standard file format or data
it respond with the same set of response JSON Basics interchange format that uses human-
as mocked readable text to transmit data
it emulates the real server objects consisting of attribute-value
pairs and array data types
GET Retrieve information
POST Create new recourses
HTTP Methods / Actions of API PUT Updates the existing resources
DELETE Delete the existing resources
Postman acts a Client
What is Postman?
HEAD Retrieve resources headers
2012, Abhinav Asthana as a chrome plugin
API Test Automation
Space to organize the collection Workspace
using Postman 1XX informational
group of API request Collections
2XX Success
Request/Response Building Block of Postman
Status code 3XX Redirectional
Global
4XX Client error
Environment
5XX Server error
Collection Variables
Data
A development approach
On the scripting side Local
Considers APIs before anything else
API- First
Postman has powerful runtime-based It ensures that all of the platform/
node.js that allows you to add Dynamic application functionalities are accessible
behavior to request and collection through the APIs
That allows you to write API test build
Complete set of technical info and
request that can contain dynamic API Jargon
Writing Testes capability of the API
parameter as data b/w request and the
load API documentation
It carries sufficient info to work with that
api
Add test on pre-request script and tests
Merging of different APIs into single front
Anything before hitting send has to under Pre-request Script
API Orchestration end
Where we can write test?
Any validation that you have to do after
getting sent? Test
Functionality
Chaijs.com Tools Advanced assertions
Focus to determine if it meets Reliability
Used to import to postman Require method What is API testing expectations for
Performance
moment Usage of external libraries
Security
Load ash Libraries Ex
Writing code using the API
Postman collections
Sending request
How we do?
Handling SOAP request and responses
Verifying response
Postman Performance
Can be performed even when the front -
end is not yet ready
Focus on the functionalities of the
Collection Runner Importance of API testing application
Help in early bug detection and reduce
the cost , effort, time
Lack of details/documentation
API testing
Lack of Technical Knowledge
Challenges of API testing Setup and installation challenges
Complexity of the API
Data-Driven approach
Interoperability
Mockaroo tool Mock data example
Core functionalities
How API testing is different form GUI
Testing? Part of back-end testing
Develop the API and deployment them Deployment NO GUI
SaoapUI
Back up of API collection Backup Insomnia
Integration in postman Swagger
Katalon
Help to analyse more about the API Analytics
JMeter
Tools available
appigee
Notify when changes happened Notifications
Assertible
Deployment of the API and setting and
testing them CI Karate Labs
Check the console Postman
learn to Re-usage Create authorization for collections
Tell what happened in collection Check history Best practice in postman
Use ready maid snippet
Postman community
