---
marp: true
theme: default
paginate: true
title: "03 Web And Api Testing"
---

# Web Testing Essentials

- Verify UX-critical paths and core flows
- Check cross-browser and responsive behavior
- Include accessibility and error-state checks

References: https://www.selenium.dev/documentation/ | https://web.dev/learn/accessibility

---

# API Testing Fundamentals

- Validate status, schema, and business rules
- Check idempotency, auth, and error contracts
- Automate API checks for fast feedback

References: https://learning.postman.com/docs/tests-and-scripts/write-scripts/test-scripts/

---

# Contract Testing (CDC)

- Verify producer-consumer API contracts
- Catch integration drift earlier
- Reduce dependence on brittle full E2E

References: https://pact.io/ | https://docs.pact.io

---

# Exploratory Testing for Web/API

- Use charters to focus time-boxed exploration
- Document observations and new risks quickly
- Feed findings back into regression suites

References: https://www.istqb.org/certifications/certified-tester-foundation-level

---

# Security and Abuse Cases

- Include auth, authorization, injection, and session tests
- Map critical checks to OWASP Top 10
- Prioritize by business impact and exposure

References: https://owasp.org/www-project-top-ten/

---