API testing: Difference between revisions

Revision as of 11:11, 16 June 2022

Revision as of 15:04, 9 July 2022

Line 32:

* [[List of web service specifications|WS-*]] compliance testing - (SOAP only) Checking compliance to WS-* standards such as WS-Addressing, WS-Discovery, WS-Federation, WS-Policy, WS-Security, and WS-Trust.

* [[Penetration testing]] - testing a computer system, network or Web application to find vulnerabilities that an attacker could exploit.

* [[Fuzz-testing]] - massive amounts of purely random data, sometimes referred to as "noise" or "fuzz", is forcibly input into the system in order to attempt a forced crash, overflow, or other negative behavior. This is done to test the API at its absolute limits, and serves somewhat as a "worst -case scenario".

* [[Contract testing]] - Testing confirms that individual microservices send and receive messages to each with a shared understanding.

==Software==