🔌 API Automation
Automated API suites — CRUD, schema, auth and contract-style checks. This area's dedicated view is coming together — meanwhile, the curated content below is drawn directly from the Practice section.
REST Assured · Karate
// Project Samples(2)
REST Assured API Automation Project Sample
A complete Java API automation project sample using REST Assured, reusable request and response specifications, authentication helpers, JSON schema validation, test data builders, Allure reporting, and CI/CD.
Karate API Automation Project Sample
A complete API automation project sample using Karate, feature files, reusable scenarios, authentication setup, schema matching, data-driven tests, HTML reporting, parallel execution, and CI/CD.
// Practical Assignments(7)
REST API Testing — CRUD Validation
Test a public REST API end-to-end: CRUD operations, status code validation, schema checking, authentication, and error handling — using any HTTP tool or language.
REST Assured — Build an API Test Suite
Write a REST Assured + Java test suite for a public API: CRUD operations, JSON schema validation, authentication, and chained request scenarios using TestNG.
Karate — Contract-Style API Tests
Write Karate DSL feature files that validate a REST API contract: response schema, required fields, status codes, and data-driven scenarios using Karate's built-in fuzzy matching.
GraphQL — Test a Query and Mutation API
Build a focused test suite for a GraphQL API covering queries, mutations, the errors array, nested authorisation, and the N+1 trap — the concerns that make GraphQL testing different from REST.
Web & API Security — Test an App's Defences
Plan and run a defensive security test pass over a web/API application: map the OWASP risks to the right scanning approach (SAST/DAST/SCA), probe access control and injection, and triage findings — all within authorised scope.
AI Test Generation — Draft, Review, and Curate
Use an AI tool (or an LLM) to generate test cases from a spec, then do the part that actually matters: review, correct, and curate the output into a trustworthy suite — practising the human-in-the-loop discipline AI testing depends on.
Mobile App — Build an E2E Test Pass
Plan and build an end-to-end test pass for a mobile app: pick the right framework for the platform, automate against an emulator/simulator, handle the mobile-specific traps (gestures, waits, fragmentation), and reason about what only a real device can tell you.