Rest API Test and Security

Learning objectives

• Learning objectives

Monday

• Review of Friday Hotel API exercise. Prepare a short presentation of your solution. The goal is to get an overview of how far you have come, and what challenges you had, and what you have learned.

Tuesday (class) - Rest API Test

Prepare for class

Reading

• Rest-assured.io (5 min)
• Short Rest Assured Tutorial, read 1-7 (5 min)
• Hamcrest guide (skim and use for reference 10 min)

Toolbox

• Rest-assured overview
• The Gherkin Syntax
• General Theory about testing

Videos

• Chapter 2 of TAU video tutorial (14:45 min)

Exercises in in class

• Gherkin Syntax
• Hamcrest Matchers
• Testing Poems API

Wednesday (CodeLab)

• Codelab and Hotel API Test

Thursday (class) - Security

Prepare for class

Video

• Password hashing with Bcrypt (7 min)
• How does JWT work? (1:06 min)
• JSON Web Tokens (first 24 min ONLY)

Extra

• Hashing passwords Video

• JWT Video

Exercises in class

• Adding a security layer to the Poems API

Friday (exercise day)

The task is to add a security layer to the Hotel API. You can find the exercise here:

• Hotel API Security

---

Table of contents

• Learning Objectives
• Exercises