Automating API testing with Postman

An API is an Application Programming Interface and is a framework for communication between systems. An API provides the information (content) that an app presents to the end user. The central question in this two-day training is: How do you test any API used by any app?

This two-day course addresses the risks involved in testing services and APIs. Testing is explained step by step using public APIs. What is the best testing strategy to follow? What test environment is needed for this? Perhaps the production environment? Where does API testing stop and where does mobile app testing (for example) start? Who will provide an End to End test? Answers to these and more questions are covered in this training.

During the first day of this two-day course, learn what REST APIs are (or refresh your API knowledge). We start with the basic concepts of a “message architecture” in an API. Elements such as “resources, verbs, state, headers, tokens” etc. are explained. These “building blocks” lay the foundation for starting API testing. With the help of demos, examples and exercises, practical knowledge is taught and one learns to recognize the typical risks associated with interfaces. The second day of the course focuses on improving skills in API testing. As a result, trainees will be better able to provide feedback to their development team in a more efficient and effective manner. How do you test if the API is easy to use, if it is scalable, performs at an acceptable level and how secure it is?

During a hands-on workshop, participants will learn how to create and implement test strategy. Also discussed is the use of tooling to compare different versions of APIs and resources. You will also learn how to use “headers” with “tokens,” how to set up Java scripts to automate tests with assertions, and how to run performance tests. In addition to theory, the workshop uses practical exercises. Each exercise focuses on a separate API and different ways of implementation. Participants will learn the specific weaknesses and risk factors of APIs and how to apply techniques to avoid these risks.