Hands-On RESTful API Design Patterns and Best Practices

Security tests

Security tests ensure APIs are secure from external threats and protected from the vulnerabilities that we have discussed in earlier sections. The primary focus of API security tests and security testers is to find the vulnerabilities of the API they intend to test by running penetration tests, fuzz tests, validations, sensitive data exposure determination, and so on.

Security functional testing and security vulnerability testing are two categories of security tests. A functional test executes manual tests and manually checks for the presence of security mechanisms within API's implementation. Security vulnerability tests execute automated test cases that may expose vulnerabilities.

The ultimate goal of the tester should be ...