List of resources to go through about API testing
VADER - @LindaSaraRoy - http://europeantestingconference.eu/slides18/Roy.pdf
POISED - @ambertests - https://www.dropbox.com/sh/58jetbs7plwh6s9/AACZq4vePkIfB1r8s5EgYIZha?dl=0&preview=Race--APITestingWithPostman.pptx
TATTA - @2bittester - Mark Winteringham: Say TaTTa to Your TuTTu: https://www.youtube.com/watch?v=8SOu3fQ0Dvs and/or https://www.youtube.com/watch?v=VGNxv9ilFbQ
LHTRAFFIC - @bvccaneer - https://szekar1.wordpress.com/2018/09/11/lhtraffic/
SPEEDLOADS - @Donbavand - https://danieldonbavand.com/testing-speedloads-api-mnemonic/
ICEOVERMAD - @northern_tester - http://testingisbelieving.blogspot.com/2013/11/johnny-mnemonic-iceovermad.html
PAPAS BE @ SFO - @testinggeek - http://www.qualityperspectives.ca/resources/#mnemonics
DEED HELP GC - @testinggeek - http://www.qualityperspectives.ca/resources/#mnemonics
DVLA PC - @testinggeek - http://www.qualityperspectives.ca/resources/#mnemonics
BINMEN (Boundary, Invalid Entries, Nulls, Method, Empty, Negatives) - @gwendiagram & @northern_tester at TestBash Brighton 2017 https://www.ministryoftesting.com/dojo/series/testbash-brighton-2017/lessons/how-to-turn-a-403-into-a-202-at-the-api-party-gwen-diagram-ash-winter
Maaret Pyhäjärvi - @maaretp - https://dojo.ministryoftesting.com/dojo/lessons/exploratory-testing-an-api
Aaron Evans talk from onlinetestconf - https://www.slideshare.net/practitest/testing-web-apps-and-apis (YouTube included!)
Series of blog posts by Kristin Jackvony:
REST requests - http://fearlessautomation.blogspot.com/2018/02/introduction-to-rest-requests.html
GET requests - http://fearlessautomation.blogspot.com/2018/02/testing-get-requests.html
POST requests - http://fearlessautomation.blogspot.com/2018/03/testing-post-requests.html
PUT requests - http://fearlessautomation.blogspot.com/2018/03/testing-put-requests.html
PATCH requests - http://fearlessautomation.blogspot.com/2018/03/testing-patch-requests.html
Danny Dainton
https://github.com/DannyDainton/All-Things-Postman
Alan Richardson - @eviltester:
Some API Testing Basic - http://blog.eviltester.com/2015/01/some-api-testing-basic-introductory.html
Automating and Testing a REST API - https://www.compendiumdev.co.uk/page.php?title=tracksrestapibook
multiple videos from - https://www.youtube.com/results?search_query=api+evil+tester
Amber Race:
https://www.joecolantonio.com/2016/09/29/api-testing-postman/
https://github.com/ambertests/explore-with-postman and https://www.dropbox.com/sh/58jetbs7plwh6s9/AACZq4vePkIfB1r8s5EgYIZha?dl=0
Katrina Clokie - @katrina_tester:
http://katrinatester.blogspot.com/2015/09/api-web-services-microservices-testing.html
Mr.Slavchev - @TheTestingTroll:
Hindsight lessons about API testing - https://mrslavchev.com/2018/08/06/hindsight-lessons-about-api-testing/
Matthew Bretten
http://bestofthetest.blogspot.com/2017/11/so-you-can-test-api-what-next.html
Bas Dijkstra - @_basdijkstra:
https://techbeacon.com/how-perform-api-testing-rest-assured
Lisa Crispin and JoEllen Carter - @lisacrispin and @testacious:
https://www.slideshare.net/JoEllenCarter/api-fundamentals-mha2017
Mark Winteringham - https://restful-booker.herokuapp.com/
** Matthew Reinbold *** - REST API Notes - https://tinyletter.com/RESTAPINotes/archive
Weekend Testing reports on API testing:
WTA-70: Exploring REST and API’s with ARC - http://weekendtesting.com/?p=4275
WTEU-56 – Security testing for APIs - http://weekendtesting.com/?p=4033
WTEU-53 – An Introduction to API Testing - http://weekendtesting.com/?p=3898
Other links:
All API blog posts that appeared on 5blogs - https://5blogs.wordpress.com/category/api/
API Testing Glossary - https://offbeattesting.com/2018/10/16/api-testing-glossary
HTTP API Development Tools - https://github.com/yosriady/api-development-tools/blob/master/README.md
API-Security-Checklist - https://github.com/shieldfy/API-Security-Checklist/blob/master/README.md
The-Ultimate-Checklist-for-REST-APIs - https://www.kennethlange.com/posts/The-Ultimate-Checklist-for-REST-APIs.html
Working with Web APIs - https://launchschool.com/books/working_with_apis
Introduction to HTTP - https://launchschool.com/books/http
Your API is bad - https://leanpub.com/yourapiisbad
Learn REST: A RESTful Tutorial - https://www.restapitutorial.com/
REST API description - https://restfulapi.net/
API hierarchy of needs - http://apiux.com/2013/05/29/api-hierarchy-needs/
How to Build a RESTful API with Authentication in 5 minutes - https://medium.freecodecamp.org/build-restful-api-with-authentication-under-5-minutes-using-loopback-by-expressjs-no-programming-31231b8472ca
Abour Accept-Encoding header - https://szekar1.wordpress.com/2020/07/16/mobile-app-testing-maninthemiddle-can-fool-you/
List of Open Source tools - https://www.joecolantonio.com/2017/05/16/12-open-source-api-testing-tools-rest-soap-services
https://www.inflectra.com/rapise/highlights/api-testing.aspx
https://www.loadview-testing.com/blog/what-is-api-testing/
https://smartbear.com/learn/api-testing/what-is-api-testing/
https://blog.udemy.com/api-testing/
https://dzone.com/articles/7-rules-for-rest-api-uri-design-1
Microsoft REST API Guidelines - https://github.com/Microsoft/api-guidelines/blob/vNext/Guidelines.md
https://apisecurity.io/ - learn from other incidents - API Security Newsletter
[PL] https://app.getpocket.com/read/3119547314 - testing API security - list of tricks and tips in polish
OWASP API Security Top 10 2019 - https://github.com/OWASP/API-Security/blob/master/2019/en/dist/owasp-api-security-top-10.pdf