- cleint server architecture and API webservices
- API CRUD and HTTP verbs Request
- Data driven Testing and webservices SOAP and REST
- URL and variables in API
- Environment , global variables and Request and Response
- API Request workflow and mock server
cover by SSQUREIT
NOT COVER
1. Client-Server Architecture
Understanding the basics of client-server architecture
Differences between client-side and server-side
2. API Web Services
Definition and types of web services (SOAP and REST)
Differences between SOAP and REST
3. HTTP Basics
HTTP request and response structure
Status codes and their meanings
4. CRUD Operations
Create, Read, Update, Delete (CRUD) operations in APIs
HTTP verbs (GET, POST, PUT, DELETE, PATCH, OPTIONS, HEAD)
5. Data-Driven Testing
Concept of data-driven testing
Implementing data-driven tests for APIs
6. URL and Variables in API
URL structure and components (scheme, host, path, query parameters)
Path variables vs. query parameters
7. Environment and Global Variables
Setting up and using environment variables
Setting up and using global variables
8. Request and Response
Constructing and sending API requests
Parsing and validating API responses
9. API Request Workflow
Understanding the workflow of an API request
Error handling and troubleshooting
10. Mock Servers
Purpose and use of mock servers
Setting up and using a mock server for testing
11. Authentication and Authorization
Basic Auth, API keys, OAuth, JWT
Role-based access control (RBAC)
12. API Documentation
Importance of API documentation
Tools for creating and reading API documentation (Swagger, Postman)
13. API Testing Tools
Postman
SoapUI
JMeter
RestAssured (for automated API testing)
14. API Testing Strategies
Unit testing APIs
Integration testing APIs
Load testing and performance testing APIs
15. Handling API Rate Limiting
Understanding rate limiting
Strategies for handling rate limiting in tests
16. API Versioning
Importance of API versioning
Strategies for managing and testing different API versions
17. Error Handling in APIs
Common error responses (4xx and 5xx status codes)
Strategies for testing error conditions
18. Security Testing for APIs
Testing for common security vulnerabilities (SQL Injection, XSS, CSRF)
Tools for security testing APIs (OWASP ZAP, Burp Suite)
19. CI/CD Integration
Integrating API tests into CI/CD pipelines
Tools for CI/CD integration (Jenkins, GitLab CI, CircleCI)
