{"id":3376,"date":"2017-07-05T13:13:12","date_gmt":"2017-07-05T07:43:12","guid":{"rendered":"https:\/\/www.innovationm.com\/blog\/?p=3376"},"modified":"2017-07-05T13:13:12","modified_gmt":"2017-07-05T07:43:12","slug":"api-testing","status":"publish","type":"post","link":"https:\/\/www.innovationm.com\/blog\/api-testing\/","title":{"rendered":"API testing"},"content":{"rendered":"

API testing<\/strong><\/p>\n

API is an acronym for A<\/strong>pplication P<\/strong>rogramming I<\/strong>nterface.\u00a0It enables communication and data exchange between two separate software systems. A software system implementing an API contains functions\/sub-routines which can be executed by another software system.For example, a Google website can have API for various functions like search, translations, calendars, etc<\/p>\n

API Architecture<\/strong><\/h3>\n

API calls Collection include mainly three things:
\n1. HTTP headers
\n2. HTTP Request (POST,GET,PUT,DELETE )
\n3. Status Code\/ Response Code<\/p>\n

Apart from this your application collection include many things if it required to test in your application.<\/p>\n

HTTP headers<\/strong> – HTTP headers are always depended on your application.It can be either standard or custom headers:<\/p>\n

Content-Type<\/strong> – A standard MIME type describes the format of object data we are sending along in the request to the server .Content \u2013type in most of the requests and responses will be application\/json. Refer to image 1.<\/p>\n

\"\"<\/p>\n

image 1.<\/b><\/p>\n

Multipart\/form-data<\/b> – when your form includes any <input type=”file”> elements.<\/span><\/p>\n

Authorization <\/b>– A token included with requests to identify the requester. <\/span>This header has to be included in all requests other than the login request.(Custom Header). Refer to image 2<\/p>\n

User Authorisation while requesting data from API is very important for security reasons .<\/span><\/p>\n

Eg. A there are some \u00a0features in the \u00a0application which are accessible only to admin and some are accessible only to the user . A user tries to access features which are only accessible to the admin , an error 401 – unauthorised person \u00a0to be shown to the user .<\/span>To achieve this for every user a unique token is generated during login and that unique token is to be used by the user while requesting data from the APIs.<\/span><\/p>\n

\"\"<\/p>\n

image 2.<\/strong><\/p>\n

The Hypertext Transfer Protocol (HTTP)<\/strong> is designed to enable communications between clients and servers.
\nHTTP works as a request-response protocol between a client and server.
\nA web browser may be the client, and an application on a computer that hosts a web site may be the server.<\/p>\n

HTTP Request<\/strong> – There are mainly four request, which we used frequently: DATA =
\nPOST –<\/strong> Create Or Update data
\nPUT<\/strong> – Update data
\nGET<\/strong> – Retrieve data
\nDELETE<\/strong> \u2013 Delete data<\/p>\n

Two commonly used methods for a request-response between a client and server are: GET and POST.
\nGET<\/strong> – Requests data from a specified resource.No body is sent along the request.Refer image 3<\/span><\/p>\n

\"\"<\/p>\n

image 3.<\/b><\/p>\n

POST<\/strong> – Submits data to be processed to a specified resource.In this the body is sent along the request to the server.Refer image 4<\/span><\/p>\n

\"\"<\/p>\n

image 4.<\/b><\/p>\n

By design, the POST request method requests that a web server accept the data enclosed in the body of the request message, most likely for storing it. It is often used when uploading a file or when submitting a completed web form. In contrast, the HTTP GET request method retrieves information from the server.<\/p>\n

Validating the results<\/strong><\/h2>\n

Mainly, for API testing, we need to check response code, a response message, and response body.
\nBelow are the various response code, one might encounter while API testing.<\/p>\n

Status Code\/Response Code<\/strong> – There are many status\/response code, from them we can verify the response.
\n200 – OK, The request was successful.
\n201 – Created, The request was successful and data was created.
\n204 – No Content, The response is empty.
\n400 – Bad Request, The request could not be understood or was missing required parameters.
\n401 \u2013 Unauthorized, Authentication failed or user does not have permissions for the requested operation.
\n403 – Forbidden, Access denied.
\n404 – Not Found, Data was not found.
\n405 – Method Not Allowed, Requested method is not supported for the specified resource.
\n500 – Internal Server Error.
\n503 – Service Unavailable, The service is temporary unavailable.<\/p>\n

\"\"<\/p>\n

 <\/p>\n

Challenges for API Testing<\/h3>\n

The interesting problems for testers are:<\/p>\n

    \n
  1. Creating interesting parameter value combinations for calls with two or more parameters<\/li>\n
  2. Identifying the content under which the API calls has to be made. Which might include setting external environment conditions ( peripheral devices, files, etc.) as well as internally stored data that affects the API<\/li>\n
  3. Sequencing API calls as per the order in which the functionality will be executed<\/li>\n
  4. To make the API produce useful results from successive calls.<\/li>\n<\/ol>\n

    Step 1): Launch the extension once it is installed successfully.<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Step 2): Enter the URL of the API in the URL textbox<\/strong><\/p>\n

    \"\"<\/p>\n

     <\/p>\n

    Step 3): Select the radio button for the type of HTTP method to hit- e.g. POST<\/strong><\/p>\n

    \"\"<\/p>\n

    Step 4) : Provide Headers (if required), in the Headers textbox.<\/strong>
    \nSometimes we need to give headers like
    \nContent-Type: application\/json
    \nX-User-Type: standard<\/p>\n

    \"\"<\/p>\n

    Step 5):<\/strong> Under Payload, pass the request body of the API in the form of key-value pairs<\/strong> e.g. {{“key1″:”value1″,”key2″:”value2”}. If it is post API, then we need to pass body or parameters.<\/p>\n

    \"\"<\/p>\n

    Step 6): Set the required content type e.g. application\/json<\/strong><\/p>\n

    Step 7): Hit the send button. After clicking on “send” button, you will see response something like this.<\/strong><\/p>\n

     <\/p>\n

    \"\"<\/p>\n

     <\/p>\n

     <\/p>\n

     <\/p>\n","protected":false},"excerpt":{"rendered":"

    API testing API is an acronym for Application Programming Interface.\u00a0It enables communication and data exchange between two separate software systems. A software system implementing an API contains functions\/sub-routines which can be executed by another software system.For example, a Google website can have API for various functions like search, translations, calendars, etc API Architecture API calls […]<\/p>\n","protected":false},"author":1,"featured_media":3411,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[71,7,102],"tags":[203,205,206,204],"class_list":["post-3376","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-mobile","category-mobile-testing","category-web-service","tag-api","tag-postman","tag-rest-api","tag-testing"],"yoast_head":"\nAPI testing - InnovationM - Blog<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.innovationm.com\/blog\/api-testing\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"API testing - InnovationM - Blog\" \/>\n<meta property=\"og:description\" content=\"API testing API is an acronym for Application Programming Interface.\u00a0It enables communication and data exchange between two separate software systems. A software system implementing an API contains functions\/sub-routines which can be executed by another software system.For example, a Google website can have API for various functions like search, translations, calendars, etc API Architecture API calls […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.innovationm.com\/blog\/api-testing\/\" \/>\n<meta property=\"og:site_name\" content=\"InnovationM - Blog\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-05T07:43:12+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.innovationm.com\/blog\/wp-content\/uploads\/2017\/06\/API-Testing.png\" \/>\n\t<meta property=\"og:image:width\" content=\"1140\" \/>\n\t<meta property=\"og:image:height\" content=\"633\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"InnovationM Admin\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"InnovationM Admin\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/\"},\"author\":{\"name\":\"InnovationM Admin\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/#\\\/schema\\\/person\\\/a831bf4602d69d1fa452e3de0c8862ed\"},\"headline\":\"API testing\",\"datePublished\":\"2017-07-05T07:43:12+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/\"},\"wordCount\":818,\"commentCount\":0,\"image\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/API-Testing.png\",\"keywords\":[\"API\",\"Postman\",\"REST API\",\"Testing\"],\"articleSection\":[\"Mobile\",\"Mobile Testing\",\"Web service\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/\",\"url\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/\",\"name\":\"API testing - InnovationM - Blog\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/API-Testing.png\",\"datePublished\":\"2017-07-05T07:43:12+00:00\",\"author\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/#\\\/schema\\\/person\\\/a831bf4602d69d1fa452e3de0c8862ed\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/API-Testing.png\",\"contentUrl\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/wp-content\\\/uploads\\\/2017\\\/06\\\/API-Testing.png\",\"width\":1140,\"height\":633},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/api-testing\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"API testing\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/\",\"name\":\"InnovationM - Blog\",\"description\":\"\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/#\\\/schema\\\/person\\\/a831bf4602d69d1fa452e3de0c8862ed\",\"name\":\"InnovationM Admin\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c99d9eece9dfbc82297cf34ddd58e9fe05bb52fe66c8f6bf6c0a45bfb6d7629?s=96&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c99d9eece9dfbc82297cf34ddd58e9fe05bb52fe66c8f6bf6c0a45bfb6d7629?s=96&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/5c99d9eece9dfbc82297cf34ddd58e9fe05bb52fe66c8f6bf6c0a45bfb6d7629?s=96&r=g\",\"caption\":\"InnovationM Admin\"},\"sameAs\":[\"http:\\\/\\\/www.innovationm.com\\\/\"],\"url\":\"https:\\\/\\\/www.innovationm.com\\\/blog\\\/author\\\/innovationmadmin\\\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"API testing - InnovationM - Blog","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.innovationm.com\/blog\/api-testing\/","og_locale":"en_US","og_type":"article","og_title":"API testing - InnovationM - Blog","og_description":"API testing API is an acronym for Application Programming Interface.\u00a0It enables communication and data exchange between two separate software systems. A software system implementing an API contains functions\/sub-routines which can be executed by another software system.For example, a Google website can have API for various functions like search, translations, calendars, etc API Architecture API calls […]","og_url":"https:\/\/www.innovationm.com\/blog\/api-testing\/","og_site_name":"InnovationM - Blog","article_published_time":"2017-07-05T07:43:12+00:00","og_image":[{"width":1140,"height":633,"url":"https:\/\/www.innovationm.com\/blog\/wp-content\/uploads\/2017\/06\/API-Testing.png","type":"image\/png"}],"author":"InnovationM Admin","twitter_misc":{"Written by":"InnovationM Admin","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#article","isPartOf":{"@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/"},"author":{"name":"InnovationM Admin","@id":"https:\/\/www.innovationm.com\/blog\/#\/schema\/person\/a831bf4602d69d1fa452e3de0c8862ed"},"headline":"API testing","datePublished":"2017-07-05T07:43:12+00:00","mainEntityOfPage":{"@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/"},"wordCount":818,"commentCount":0,"image":{"@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#primaryimage"},"thumbnailUrl":"https:\/\/www.innovationm.com\/blog\/wp-content\/uploads\/2017\/06\/API-Testing.png","keywords":["API","Postman","REST API","Testing"],"articleSection":["Mobile","Mobile Testing","Web service"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.innovationm.com\/blog\/api-testing\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/","url":"https:\/\/www.innovationm.com\/blog\/api-testing\/","name":"API testing - InnovationM - Blog","isPartOf":{"@id":"https:\/\/www.innovationm.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#primaryimage"},"image":{"@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#primaryimage"},"thumbnailUrl":"https:\/\/www.innovationm.com\/blog\/wp-content\/uploads\/2017\/06\/API-Testing.png","datePublished":"2017-07-05T07:43:12+00:00","author":{"@id":"https:\/\/www.innovationm.com\/blog\/#\/schema\/person\/a831bf4602d69d1fa452e3de0c8862ed"},"breadcrumb":{"@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.innovationm.com\/blog\/api-testing\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#primaryimage","url":"https:\/\/www.innovationm.com\/blog\/wp-content\/uploads\/2017\/06\/API-Testing.png","contentUrl":"https:\/\/www.innovationm.com\/blog\/wp-content\/uploads\/2017\/06\/API-Testing.png","width":1140,"height":633},{"@type":"BreadcrumbList","@id":"https:\/\/www.innovationm.com\/blog\/api-testing\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.innovationm.com\/blog\/"},{"@type":"ListItem","position":2,"name":"API testing"}]},{"@type":"WebSite","@id":"https:\/\/www.innovationm.com\/blog\/#website","url":"https:\/\/www.innovationm.com\/blog\/","name":"InnovationM - Blog","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.innovationm.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.innovationm.com\/blog\/#\/schema\/person\/a831bf4602d69d1fa452e3de0c8862ed","name":"InnovationM Admin","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/5c99d9eece9dfbc82297cf34ddd58e9fe05bb52fe66c8f6bf6c0a45bfb6d7629?s=96&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/5c99d9eece9dfbc82297cf34ddd58e9fe05bb52fe66c8f6bf6c0a45bfb6d7629?s=96&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/5c99d9eece9dfbc82297cf34ddd58e9fe05bb52fe66c8f6bf6c0a45bfb6d7629?s=96&r=g","caption":"InnovationM Admin"},"sameAs":["http:\/\/www.innovationm.com\/"],"url":"https:\/\/www.innovationm.com\/blog\/author\/innovationmadmin\/"}]}},"_links":{"self":[{"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/posts\/3376","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/comments?post=3376"}],"version-history":[{"count":0,"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/posts\/3376\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/media\/3411"}],"wp:attachment":[{"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/media?parent=3376"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/categories?post=3376"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.innovationm.com\/blog\/wp-json\/wp\/v2\/tags?post=3376"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}