This document provides an overview of REST APIs and testing techniques. It defines key concepts like REST, resources, HTTP verbs and status codes. Testing strategies like the API testing pyramid and heuristics like DEED HELP GC and VADER are introduced. Automated testing tools like REST Assured are also covered. The document concludes with next steps like watching API courses, playing with sample APIs, writing API tests and preparing a quiz.

1. Wszystko co
chcieliscie
wiedziec o REST
API
Aleksander Zaleski

2. Agenda
Introduction
REST ASSURED
HTTP
REST API
API Testing Tips and Tricks

4. Hangover
Zone
Comfort Zone

5. What is it there for me?
Test your knowledge
Find out what you don’t know
Get tips on learning pathway
Have fun!

6. Quiz Rules
Fair play. One attempt only.
More points for faster correct answer
Use last 5 digits of your phone number as a login
All results are final. No appeals.
Have fun!

7. Quiz Time

8. API
Application Program Interface -
is the means by which third parties
can write code that interfaces with
other code.

9. REST
is a software architectural style that
defines a set of constraints to be
used for creating Web services.

10. Web Services
Type of API
is used to exchange data between applications
interface specified as a Web Service Description Language
almost always operates over HTTP
Protocols include SOAP and REST

11. Resource - Any information that can be named can
be a resource: a document or image, a temporal
service (e.g. "today's weather in Los Angeles")
readers/{pesel}
books/{id}/authors/{id}

12. 1. Contract first approach /
Uniform Resource
Identifiers
The 5 principles of REST

13. 2. Stateless
22
The 5 principles of REST
Each request must contain all of the information
necessary to be understood by the server.
Storing session state on the server violates this
constraint.
Session state must be handled entirely by the client.

14. 3. Client-Server model
Most often HTTP(S), but
could be SNMP, SMTP etc
The 5 principles of REST

15. 4. Caching
The 5 principles of REST

16. 5.Layered architecture
The 5 principles of REST

17. REST basics
Separate your API into logical resources.
Use nouns, not verbs for resources
Use verbs GET, POST, PUT,PATCH,DELETE* etc to
describe actions

18. readers/{pesel}
books/{isbn}/authors/{id}
books/{isbn}/authors/{id}/editions/{nr}

19. HTTP

20. Quiz Time

21. http://lazyheap.com/http-verbs-details-meaning-usage/

22. wikipedia:HTTP

23. HTTP status response codes
1xx: hold on (info)
2xx: Here you go (success)
3xx: I am elsewhere (redirect)
4xx: Your fault (client error)
5xx: My fault (server error)

24. HTTP status response codes
200: OK
201: Created
202: Accepted
204: No content

25. HTTP status response codes
400 Bad Request
401 Unauthorised
403 Forbidden
404 Not Found

26. 4xx response codes
405 Method Not Allowed
406 Not Acceptable
408 Request Timeout
451 Unavailable For Legal
Reasons

27. 5xx response codes
500 Internal Server Error
501 Not Implemented
502 Bad Gateway
503 Service Unavailable
504 Gateway Timeout

28. HTTP headers
Created by:

29. API Testing Tips and Tricks

30. API Testing Pyramid
Behavior
Solution
Oriented
Contract
By James Higginbotham

31. Heuristics
DEED HELP GC
ICE OVER MAD
POISED
PAPAS BE @ SFO
VADER
DVLA PC

32. Heuristics are POISED!
Parameters
Output
Inter-operability
Security
Error Handling
Data By Amber Race

33. P - parameters
Boundary values testing on these parameters
Empty/null/whitespace on one or more
Big List of naughty strings
Add or Delete parameter
Change Data Type

34. VADER Heuristics
Verbs
Authentication
Data
Errors
Responsiveness
By Linda Roy

35. ICE OVER MAD
Integration
Consumers
Endpoints
Operations
Volume
Error Handling
RESTful
Modularity
Authentication
Definition
By Ash Winter

36. REST Assured
Awaitilty

37. Quiz Time

38. REST ASSURED
01 Fluent BDD-friendly syntax
.given(arrange)
. when(act)
. then(assert)
02 Built-in Schema validator, parser and matcher (e.g. jsonPath)

39. REST ASSURED
Many ways to set request parameters Logging
Verifying Response Data
Measure Response Time
Flexible Object mapping to/from JSON/XML

40. REST ASSURED ─ Example

41. REST ASSURED ─ Example

42. Awaitility
Java DSL that allows you to express expectations of
an asynchronous system in a concise and easy to
read manner.

43. Awaitility

44. Awaitility

45. What to do next?
Watch TAU courses on REST API (Bas Dijkstra and Amber Race)
Play with API: SWAPI or https://restful-booker.herokuapp.com/
Write API tests for e.g. MrBuggy7
Read Allan Richardson book about REST API testing
(compendiumdev.co.uk)
Prepare your own quiz

46. References
https://github.com/szekar1/API-testing-docs
https://www.danieldonbavand.com/testing-mnemonics/
https://apitester.com/ - create your tests without coding

47. Thank you for
participation!