课程: API Testing Foundations

今天就学习课程吧!

今天就开通帐号,24,700 门业界名师课程任您挑!

Overview of authorization and authentication

Overview of authorization and authentication - Postman教程

课程: API Testing Foundations

Overview of authorization and authentication

- [Dave] One of the more difficult parts of working with APIs is security. Since APIs can be used programmatically, they can be attacked in many ways and a lot of thought and effort needs to be put into making sure that they're secure. This is good, but from a testing perspective it can also make it a bit more difficult to work with. When an API is secured, we need to know how to navigate through the security. If we want to call the different endpoints for testing them we need to first figure out how we can even access those endpoints. As testers, we need to have a bit of an understanding of how security measures work so that we can also test those security options themselves. There are a number of different protocols that can be used to secure an API and we'll get into them a bit in future videos, but I want to start with understanding the difference between authorization and authentication. In essence, authentication is…

内容