API Fuzzing: What it is and why you should use it

API Fuzzing is a way of API testing that uses an API's definition to do testing in an automated way. It creates tests based on schemas, runs them, and reports on success and failures. It is not a replacement of functional tests, but it automates the busy work of creating tests that validate the correct behavior based on input and output schemas.

José Haro Peralta, Author of "Microservice APIs", walks us through the basics and also shows a demo of Schemathesis, a popular API fuzzing tool. Schemathesis works with OpenAPI and AsyncAPI APIs, and in this example we see how it correctly finds a type error that we introduced in the demo server.

API fuzzing is not a replacement for functional tests. It simply allows you to focus on writing these tests by taking over the busy work of testing against the schemas of your API.

#apidevelopment #api #apimanagement #apitesting #testing #fuzzing #apifuzzing #softwaredevelopment #apistrategy #digitaltransformation #gettingapistowork #apisecurity #contracttesting #openapi #asyncapi

[albertoneto]

When using open api and also the maven generator where you can’t make any update to the response object as the generator is in charge to make sure things are proper set… is schemathesis not needed?