REST API Testing
-
Functionality testing
- Verify all the endpoints are functional
- Check all the mandatory and optional parameters
- Request/Response headers validation
-
Security testing
- Token authentication
- Endpoints security (Bearer, Cookies)
- Permissions/Roles
-
Data Validation
- Verify each endpoint returns expected data payload
- Response codes validation
- Data format
-
Error/Negative testing
- Mistake in endpoint
- Missing request parameter
- Wrong content type
- Incorrect param type
- Missing request body
- Incorrect headers
- Invalid json format
-
Performance And Destructive testing
- Response Time
- Load test - multiple concurrent calls
- Stress test ( e.g. data is not available)