API Testing: How to Write Tests, Integrate into CI, and Track What You're Testing

Elise Carmichael

Summary:

Some developers and testers think that APIs, whether internally developed or not, should just work. Unfortunately, without a significant amount of focus on testing API services, one little flaw can spell disaster for your application—especially security vulnerabilities where hackers will target your application. Elise Carmichael discusses the risks of not fully testing APIs, how to be sure that all services are tested fully, and the types of negative testing you need to do on APIs. She shows you a method to organize your tests using Postman, a tool for REST web services testing. During this session, Elise and the participants will write some Postman API tests with variables and then execute the tests with Newman, a command line application for running Postman tests that you can include in continuous integration scripts. Elise also demonstrates a test management tool so you can have traceability from your API requirements all the way to every test execution.

Note: Bringing a laptop to this session is recommended.

Presenter Bio:

VP of quality at QASymphony Elise Carmichael is responsible for helping customers improve their QA process, expand test automation, and maximize their investments in QASymphony solutions. She has a strong desire to help people get their testing solutions organized—from security testing to functional testing. Elise has nearly twenty years of experience in the healthcare, trucking and logistics, online bidding, and construction management industries, and knowledge of a wide variety of programming languages and test frameworks. Previously, Elise directed a global software engineering and testing organization at Mobiquity.