Moving from UI to API testing

Even after spending countless hours in testing GUI and backend, numerous bugs are encountered in production. Ever wondered why? Due to the crunch of resources and time, API testing is generally skipped and that’s where a lot of bugs resides.

API testing can be challenging, especially when you don't have insights about what actually APIs are. This presentation explains to you what APIs are like you're just five. It brings forward need for API testing and also provides "heuristic" that would help focus on important things for API testing.

Transcript

1. MOVING FROM UI TO API TESTING
2. Shivani Gaba Senior QA @Xing SE @shivani_gaba_ MOVING FROM UI TO API TESTING
3. Ice cream made my day.….. .…..and my testing life too @shivani_gaba_
4. > CLIENT SERVER API REQUEST API RESPONSE @shivani_gaba_
5. EXECUTE THIS! https://giphy.com/gifs/lifetimetv-adorable-babies-l1KVaj5UcbHwrBMqI @shivani_gaba_
6. Perspective change POSTMAN vOpen-source vEasy to install/setup vConfigure and run tests vTest on-fly vOffers UI-like feeling @shivani_gaba_
7. Next REQUEST RESPONSE * 2 3 Personal Information Contact data Financial data API (Postman) User Interface
8. BODY METHOD REQUEST/ RESPONSE HEADERS CODE EXECUTION TIME AUTH- 0RISATION EMBRACE ENDPOINT ENDPOINT METHOD BODY REQUEST/ RESPONSE HEADERS AUTH- 0RISATION CODE EXECUTION TIME @shivani_gaba_
9. EMBRACE ENDPOINT @shivani_gaba_
10. https://www.example.com/rest/users?email=shivani@xing.com Protocol Endpoint Host Query Parameter URI – Uniform Resource Identifier @shivani_gaba_
11. METHOD EMBRACE ENDPOINT @shivani_gaba_
12. Type Usage URI Examples POST Create/update new resource xing.com/rest/user PATCH Update existing resource xing.com/rest/user/{user_id} GET Read/retrieve resource xing.com/rest/user/{user_id} DELETE Removal of resource xing.com/rest/user/{user_id} UPDATE CREATE RESTful API common methods @shivani_gaba_
13. We need to test updating of user‘s data thoroughly http://www.live-karikaturen.ch/downloads/manager-krawatte-aufmerksamkeit/ @shivani_gaba_
14. STEP1: Create user (POST) STEP2: Validate user details (GET)
15. STEP3: Update user (PATCH) STEP4: Check user updated (GET)
16. ENDPOINT METHOD EMBRACE BODY @shivani_gaba_
17. Next * 2 3 Personal Information Employment Financial data
18. Request Body Cheat-sheet 2. Invalid/boundary values { “email” : “demo@” , “phone” : “3233” } 4. Missing mandatory keys { “email” : demo@gmail.com } 5. Client prohibited values { “email”: “demo@gmail.com%” , “phone“ : “abc%” } 3. Empty mandatory field { “email” : “demo@gmail.com” , “phone” : “” } 6. Malformed body format { “email” : “demo@gmail.com” “phone“ : “912454332” } } 7. Invalid format <user> <email>demo@gmail.com</email> <phone>912234356</phone> </user> 8. SQL injection { “email” : “ 'anything' OR 'x‘=‚x‘ " , “phone“ : “myPassword“ } 1. Valid data { “email” : “demo@gmail.com” , “phone” : “912345678” }
19. BODY METHOD REQUEST/ RESPONSE HEADERS EMBRACE ENDPOINT @shivani_gaba_
20. @shivani_gaba_
21. BODY METHOD REQUEST/ RESPONSE HEADERS AUTH- 0RISATION EMBRACE ENDPOINT @shivani_gaba_
22. @shivani_gaba_
23. @shivani_gaba_
24. @shivani_gaba_
25. @shivani_gaba_ https://www.zdnet.com/
26. vAuthorization vAuthentication vResponse on errors/invalid vTokens Quick checks
27. BODY METHOD REQUEST/ RESPONSE HEADERS CODE AUTH- 0RISATION EMBRACE ENDPOINT
28. API Response Codes https://melbournechapter.net/explore/road-to-success-clipart/#gal_post_2580_convert-photo-to-clipart-4.png
29. @shivani_gaba_
30. @shivani_gaba_
31. When you find a bug on client
32. 3 favourite words… IT DOESN’T WORK @shivani_gaba_
33. Why it doesn‘t work?
34. https://pixabay.com/de/detektiv-untersuchung-mann-polizei-311684/
35. BODY METHOD REQUEST/RES PONSE HEADERS CODE EXECUTION TIME AUTH- 0RISATION EMBRACE ENDPOINT @shivani_gaba_
36. @shivani_gaba_
37. Should we replace UI tests with API test? https://pixnio.com/miscellaneous/hand-sword @shivani_gaba_
38. Mock API calls X Client Mock API API @shivani_gaba_
39. A little secret https://pxhere.com/en/photo/1418905 @shivani_gaba_
40. Documentation (Swagger)
41. Recommendations • Exploratory testing on API – By James Bach https://www.developsense.com/blog/2018/07/exploratory-testing-on-an-api-part-1/ • 30 Day of API Testing Challenge - MOT https://club.ministryoftesting.com/t/30-days-of-api-testing-day-6-interesting-blog-post-on-api-testing/19595 • No REST for women – By Anne-Marie Charrett https://mavericktester.com/2018/11/05/rest-apis-written-by-women/ • API, Web Services & Microservices Testing Pathway –Katrina Clookie http://katrinatester.blogspot.com/2015/09/api-web-services-microservices-testing.html @shivani_gaba_