API TESTING:-

What is an API?

API is an acronym and it stands for Application Programming Interface. API

is a set of routines, protocols, and tools for building Software Applications.
APIs specify how one software program should interact with other software
programs.

Routine: a program that performs a particular task. Routine is also known

as procedure, function or subroutine.

Protocols: A format for transmitting data between two systems.

In simple words, API stands for Application Programming Interface. API

acts as an interface between two software applications and allows the two
software applications to communicate with each other. API is a collection
of software functions which can be executed by another software
program.

Let’s see some examples of an API in a more approachable way.

Assume an API as a Waiter at a Restaurant.

At a restaurant, you give an order based on the items available on the

menu. A waiter in the restaurant writes down your order and delivers it to
the kitchen who prepares your meal. Once the meal is ready, the waiter
picks up your food from the kitchen and serves it to you at your table.

In this scenario, the waiter’s role is similar to an API. As a waiter, the API
takes a request from a source, takes that request to the database, fetches
the requested data from the database and returns a response to the
source.

Now let’s see another example.

If you are using a flight service engine say Expedia, where you search for
flights on a specific date. Once you pass the data such as Source,
Destination, Onward Date and Return Date and click on search. Expedia
sends a request to airlines through an API as per your search details. The
API then takes the airline’s response to your request and delivers it right
back to the Expedia.

API gets the request from the user and gives the response without
exposing internal logic. API acts like an Abstraction in OOPs concept.

What is API Testing?

API testing is a type of software testingthat involves testing APIs directly

and also as a part of integration testing to check whether the API meets
expectations in terms of functionality, reliability, performance, and
security of an application. In API Testing our main focus will be on a
Business logic layer of the software architecture. API testing can be
performed on any software system which contains multiple APIs. API
testing won’t concentrate on look and feel of the application. API testing is
entirely different from GUI Testing.

Let’s see how is UI testing is not similar to API testing:-

UI (User Interface) testing is to test the graphical interface part of the

application. Its main focus is to test the look and feel of an application. On
the other hand, API testing enables communication between two different
software systems. Its main focus is in the business layer of the application.

API Testing Types:-

API testing typically involves the following practices:

Unit testing: To test the functionality of individual operation

Functional testing: To test the functionality of broader scenarios by using

block of unit test results tested together

Load testing: To test the functionality and performance under load

Runtime/Error Detection: To monitor an application to identify problems

such as exceptions and resource leaks

Security testing: To ensure that the implementation of the API is secure

from external threats

UI testing: It is performed as part of end-to-end integration tests to make

sure every aspect of the user interface functions as expected

Interoperability and WS Compliance testing: Interoperability and WS

Compliance Testing is a type of testing that applies to SOAP APIs.
Interoperability between SOAP APIs is checked by ensuring conformance
to the Web Services Interoperability profiles. WS-*compliance is tested to
ensure standards such as WS-Addressing, WS-Discovery, WS-Federation,
WS-Policy, WS-Security, and WS-Trust are properly implemented and
utilized

Penetration testing: To find vulnerabilities of an application from attackers

Fuzz testing: To test the API by forcibly input into the system in order to
attempt a forced crash

Common tests on APIs:-

Some of the common tests we perform on APIs are as follows:-

1. To verify whether the return value is based on input condition. Response

of the APIs should be verified based on the request.
2. To verify whether the system is authenticating the outcome when the
API is updating any data structure

3. To verify whether the API triggers some other event or request another
API

4. To verify the behavior of the API when there is no return value

Advantages of API Testing:-

1. API Testing is time effective when compared to GUI Testing. API test
automation requires less code so it can provide faster and better test
coverage.

2. API Testing helps us to reduce the testing cost. With API Testing we can
find minor bugs before the GUI Testing. These minor bugs will become
bigger during the GUI Testing. So finding those bugs in the API Testing will
be cost effective to the Company.

3. API Testing is language independent.

4. API Testing is quite helpful in testing Core Functionality. We can test the
APIs without a user interface. In GUI Testing, we need to wait until the
application is available to test the core functionalities.

5. API Testing helps us to reduce the risks.

What exactly needs to be verified in API Testing?

1. Basically, on API Testing, we send a request to the API with the known
data and we analyse the response.

2. Data accuracy

3. HTTP status codes

4. Response time

5. Error codes in case API returns any errors

6. Authorization checks

7. Non functional testing such as performance testing, security testing

Tools used for API Testing:-

Some of the tools used for API Testing are as follows:-

1. Postman

2. Katalon Studio
3. SoapUI

4. Assertible

5. Tricentis Tosca

6. Apigee

7. JMeter

8. Rest-Assured

9. Karate DSL

10. API Fortress

11. Parasoft

12. HP QTP(UFT)

13. vREST

14. Airborne

15. API Science

16. APIary Inspector

17. Citrus Framework

18. Hippie-Swagger

19. Httpmaster Express

20. Mockbin

21. Ping API

22. Pyresttest

23. Rest Console

24. RoboHydra Server

25. SOAP Sonar

26. Unirest

27. WebInject

Difference between API testing and Unit Testing:-

UNIT TESTING:-
1. Unit testing is conducted by Development Team

2. Unit testing is a form of White box testing

3. Unit testing is conducted prior to the process of including the code in

the build

4. Source code is involved in Unit testing

5. In unit testing, the scope of testing is limited, so only basic

functionalities are considered for testing

API TESTING:-

1. API testing is conducted by QA Team

2. API testing is a form of Black box testing

3. API testing is conducted after the build is ready for testing

4. Source code is not involved in API testing

5. In API testing, the scope of testing is wide, so all the issues that are
functional are considered for testing

Challenges in API testing:-

Some of the challenges we face while doing API testing are as follows:-

1. Selecting proper parameters and its combinations

2. Categorizing the parameters properly

3. Proper call sequencing is required as this may lead to inadequate

coverage in testing

4. Verifying and validating the output

5. Due to absence of GUI it is quite difficult to provide input values

Types of bugs we face when performing API testing:-

1. Issues observed when performing API testing are

2. Stress, performance, and security issues

3. Duplicate or missing functionality

4. Reliability issues

5. Improper messaging

6. Incompatible error handling mechanism

7. Multi-threaded issues

8. Improper errors

API Testing Best Practices:-

1. Test for the expected results

2. Add stress to the system by sending series of API load tests

3. Group API test cases by test category

4. Create test cases with all possible inputs combinations for complete
test coverage

5. Prioritize API function calls to make it easy to test

6. Create tests to handle unforeseen problems

7. Automate API testing wherever it is possible.