Testing
OneSignal Push Notification Testing: API Testing, Segment Targeting, and A/B Test Notifications
OneSignal is the most widely used push notification platform for mobile and web, used by tens of thousands of apps.
API Testing
API testing guides — test REST and GraphQL APIs, write contract tests, and automate API validation.
Latest
API Testing
Kong API Gateway Testing Guide: kong-pongo, Rate Limiting & Plugin Tests
Kong API Gateway sits between your clients and your services. It handles authentication, rate limiting, routing, transformations, and more — all through plugins. Testing Kong configurations catches issues before they reach production: misconfigured rate limits, broken auth chains, routing errors, and plugin interactions that work in isolation but conflict when combined.
API Testing
AWS API Gateway Testing Guide: Lambda Authorizers, Mock Integrations & CDK Tests
AWS API Gateway is notoriously difficult to test. Its configuration is spread across stages, integrations, authorizers, and models — none of which is easily testable in isolation. This guide covers pragmatic strategies: unit-testing Lambda authorizers, using mock integrations for downstream isolation, testing with CDK constructs, and integration testing against real
Testing
Third-Party API Testing Strategies: Contract Tests vs Integration Tests vs Mocks
Your application integrates with Stripe, GitHub, Twilio, SendGrid, and Slack. Each needs tests. But which kind?
Security Testing
DAST Testing Guide: OWASP ZAP vs Burp Suite for Automated API Scanning
Dynamic Application Security Testing (DAST) probes your running application for vulnerabilities — sending real HTTP requests and observing how the server responds. OWASP ZAP and Burp Suite are the two most widely used tools. This guide covers what each finds, how to automate scans in CI, and how to interpret the
Testing
Testing Strapi v5 REST and GraphQL APIs with Jest and Supertest
Strapi v5 exposes content via REST and GraphQL APIs. Testing these APIs involves three layers: unit tests for custom service logic, integration tests against a running Strapi instance with a test database, and permission tests that verify role-based access. This guide covers all three using Jest and Supertest. Key
API Testing
RESTler: Stateful REST API Fuzzing Tutorial
RESTler is a stateful REST API fuzzer from Microsoft Research. Unlike simple fuzzers that hit each endpoint independently, RESTler infers the relationships between API calls — it knows that you must create a user before you can update it, and that updating requires the ID returned by creation. This stateful awareness
API Testing
Schemathesis vs Dredd: When to Use Which API Testing Tool
Schemathesis and Dredd both test APIs against their OpenAPI specifications.
API Testing
Schemathesis: OpenAPI and GraphQL Fuzzing Guide
Schemathesis takes your OpenAPI or GraphQL schema and automatically generates hundreds of test cases from it — including edge cases your manual test suite never thought of. It finds server crashes, unhandled exceptions, and schema violations that sit invisible in hand-written tests. This guide covers everything from basic setup to
Contract Testing
Specmatic: Contract-Driven API Testing Guide
Specmatic turns your OpenAPI specifications into executable contracts that work from both sides: it can run your spec as a stub server for consumer testing, and verify that your actual API implementation conforms to the spec for provider testing. One spec file, both directions — without writing a single test. The
API Testing
Dredd: API Blueprint and OpenAPI Testing Guide
Dredd validates that your API implementation matches its documentation.
API Testing
API Fuzzing Best Practices and Tool Comparison
API fuzzing finds the bugs that escape manual testing and code review: server crashes from unexpected inputs, schema violations from edge cases, and authorization gaps revealed by unusual request sequences. But fuzzing without a clear strategy wastes time and generates noise. This guide covers the practices that make API fuzzing