#api-testing

Breaking JSON Web Tokens: My Hunt for the “alg:none” Vulnerability in crAPI

Part 1 of a 2-part series on JWT attacks against crAPI [Read part 2 here]

I Built a Python Tool That Heals API Drift and Opens PRs Only After Tests Pass

APIs change. Tests break. That part is normal.

How to Test Microservices: A Practical Step-by-Step Guide

Modern applications are increasingly built using microservices instead of large monolithic architectures. Breaking an application into…

Fuzzing Guiado por Contrato + Lógica Fuzzy: Classificando Anomalias em APIs REST

Como transformei uma lista plana de alertas em um relatório priorizado usando inteligência difusa.

API Testing with Postman: A Practical Guide for QA Beginners

Table of Contents

Beyond “200 OK”: 18 Hidden API Testing Challenges Every QA Engineer Encounters (And How to Overcome…

I Clicked “Pay” Twice… Why Didn’t I Get Charged Twice? The Hidden Superpower of Idempotency in APIs

A Simple Concept That Saves Millions of Dollars in Software Systems

Testing Event-Driven APIs: The Pragmatic Pattern I Actually Ship

The producer test passed. The consumer test passed. The integration broke in production because the producer was emitting a field the…

Testing Distributed Transactions Across Microservices Without Tears

My first attempt to test a three-service saga ran for 47 minutes and passed. The bug it was supposed to catch shipped to production the…

What a Free API Testing Stack Looks Like Twelve Months After You Build It

The decision to use free API testing tools is easy to make. Most articles about it describe the tools available, their features, and how…

Bir Testçinin Gözünden LLM ve API Testi

Merhabalar Herkese, Bu dönem local LLM’lerle kafayı bozmuş durumdayım :) Sektör ve mesleki yetkinliklerimiz değişiyor ve gelişiyor. Bu…

From Manual API Validation to Scalable Automation: My Journey Building an API Testing Framework…

“What if API testing could be as simple, scalable, and maintainable as UI automation?”

k6 on a Locked-Down Windows Machine: No Admin, No WSL, Real Numbers

What actually works when your client machine blocks every standard install path, and what the AI endpoint data looked like afterward.

The New Generation of E2E Test Automation: Capturing Traffic and Bypassing Auth with Postman and…

End-to-End (E2E) testing ensures that your systems work cohesively, from the user interface down to the backend database. However, as…

End-to-End API Testing with Postman

API Chaining, Data-Driven Testing, Complete Response Validation, Newman CLI Reporting, and Jenkins CI/CD Integration

How To Share Data From One API To Another API

Data sharing is a very important concept in API testing. There are many ways to share the data among the tests. In this article, we will…

Testing APIs with Postman + YoBox: The 2026 Workflow

Postman is the lingua franca of API testing. Every backend team has a collection. Most of those collections quietly skip the parts of the…

How To Do API Testing | Best Practices

API testing is a type of testing that is used to evaluate that the API functions as expected. Software testing professionals analyse and…

What Is Mock Testing vs Contract Testing — When to Use Each

Two techniques that look similar on the surface serve completely different purposes beneath the surface and are most powerful when used…

ResAPI Testing: What Every Beginner Tester Should Know

When I started my journey in software testing, most of my focus was on the user interface. I would verify buttons, forms, validations, and…

Visual Studio HTTP Files (.http) ile API Testi

Merhabalar, bugünkü blogumda .http uzantılı dosyalar sayesinde Postman, Swagger gibi ek araçlara ihtiyaç duymadan, doğrudan Visual Studio…

Your Playwright Tests Shouldn’t Stop at the UI: API Testing, Mocking & Hybrid Patterns

A follow-up to building a POM suite from scratch this time going beyond the browser: API tests, network mocking, and the hybrid pattern…

The API testing gap: How AI-accelerated development challenges software quality

By Vyshnavi Dabbir, senior product marketing manager at SmartBear

From Workaround to npm Package: newman-flows Is Now a Thing

A few days ago I wrote about how we ran Postman Flows in CI without paying for Enterprise…

Stop opening your laptop for GraphQL testing

Recently, I was on-call, away from my desk, and a GraphQL endpoint started behaving strangely. Nothing catastrophic but a mutation was…

📘 Becoming an AI Tester — Part 3: Skills Every AI Tester Should Start Learning

A practical breakdown of the technical and analytical skills needed in AI testing

How API Drift Silently Breaks Data Pipelines

And How to Catch It Early

🔗 Bugs Don’t Hide in Code. They Hide in Integrations.

The code works. Unit tests pass.

GraphQL API Testing: A Modern Approach to Efficient Data Fetching

Understanding how GraphQL revolutionizes API design and eliminates the limitations of traditional REST architecture

API Tests Should Read Like Specifications — Building LashTest

Most API tests start simple.

Nulis API Test Case yang Proper

Belajar SQA Bareng #15 · API Testing

เริ่มต้นทำ API Testing ด้วย Bruno ฉบับผู้เริ่มต้น

สวัสดีทุกท่านอีกครั้ง วันนี้เราจะพาทุกท่านมารู้จักกับ Bruno และวิธีการเขียน API Testing ด้วย Bruno กัน

Postman Alternatives in 2026: 5 API Testing Tools Compared

1. SoapUI

One Missing Check. Millions of Records Exposed. Meet BOLA

Welcome back to my API pentesting series! In this third blog, we’re diving into BOLA (Broken Object Level Authorization) — the #1 API…

The Difference Between an Average QA and a Great QA

One Question That Changes Everything

Types of API Testing Every Developer Should Know

Introduction

Mistral Medium 3.5 API: Mein praxisnaher Leitfaden für Teams, die nicht nur spielen wollen

Mistral Medium 3.5 bringt 256K Kontext, native Bilderkennung, Tool-Aufrufe und starke Code-Leistung. Hier ist ein persönlicher, technischer…

HNG Stage 3 Task: Building an automated API Test Suite with Pytest

(HNG Internship — Stage 3 Task)

A Faster, Cheaper API Testing Tool for Modern Developers — APIPeek

Why We Built APIPeek

What Is API Testing in Software? A Complete Guide

Modern applications rely heavily on APIs to connect services, exchange data, and deliver seamless user experiences. Whether you’re building…

HNG API Testing & Backend Validation for Zebu

Testing the REST APIs exposed by the Zedu staging platform.

Apidog: The All-in-One API Platform That Replaces Your Entire Toolchain

POC — Running Postman Flows in CI Without Paying for Enterprise

We had a perfectly organised Postman collection, a clean CI pipeline, and a desire to run multi-step API flows automatically on every pull…

【 Java Unit Test學習】- 告別假資料！用實體檔案完美模擬上傳測試 (MockMultipartFile 實戰)

開發檔案上傳 API 時，最讓人心慌的莫過於：「我寫的解析邏輯真的對嗎？前端傳來的檔案格式如果不如預期，程式會不會直接崩潰？」

Cómo conectar MongoDB en Apidog y usarlo en pruebas de APIs (guía avanzada para QAs de servicios)

En testing de APIs, uno de los mayores retos no es ejecutar requests… sino validar que los datos realmente se persisten correctamente.

Requestly: A Lightweight, Git Native API Client That Lives on Your Machine, Not in the Cloud

Back in October, I was deep into Hacktoberfest. Like many developers, I was looking for open source projects to contribute to and learn…

I Tested Every Free Postman Alternative — Here’s the Winner

After testing 8 free Postman alternatives across API testing, design, documentation, and collaboration features, Apidog wins. It offers up…

Why Our Team Switched from Postman to Apidog for API Testing

API testing is a critical part of modern development workflows. Whether you’re building mobile apps, web apps, or full-stack platforms…

How to debug APIs on iOS & macOS without Postman

If you build apps for Apple platforms, you probably know this moment. You are deep inside Xcode, testing a feature, something breaks, and…

Running Postman Collection Using Newman with Collection-Level Variables

Overview