API key authentication in Postman - Interactive Code Practice

Practice - 5 Tasks

1fill in blank

easy

Complete the code to add the API key as a header in the request.

Postman

pm.request.headers.add({ key: 'Authorization', value: '[1]' });

Drag options to blanks, or click blank then click option'

AApi-Key 12345

BKey 12345

CToken 12345

DBearer 12345

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'Bearer' instead of 'Api-Key' prefix.

Using 'Token' or 'Key' which are not standard prefixes here.

The API key is usually sent with the header key 'Authorization' and the value starting with 'Api-Key' followed by the key.

2fill in blank

medium

Complete the code to set the API key as a query parameter named 'api_key'.

Postman

pm.request.url.addQueryParams([{ key: 'api_key', value: '[1]' }]);

Drag options to blanks, or click blank then click option'

A12345

Bkey123

CAPIKEY

Dapikey

Attempts:

3 left

💡 Hint

Common Mistakes

Using the parameter name instead of the key value.

Using uppercase or different strings that are not the key.

The value of the query parameter should be the actual API key string, e.g., '12345'.

3fill in blank

hard

Fix the error in the code to correctly add the API key in the headers.

Postman

pm.request.headers.add({ key: 'X-API-KEY', value: '[1]' });

Drag options to blanks, or click blank then click option'

AAuthorization

Bapi_key

CBearer 12345

D12345

Attempts:

3 left

💡 Hint

Common Mistakes

Using 'Authorization' or 'Bearer 12345' as the value when the header key is 'X-API-KEY'.

Using the parameter name instead of the key value.

The value should be the actual API key string, not the header name or other tokens.

4fill in blank

hard

Fill both blanks to correctly set the API key in the request headers.

Postman

pm.request.headers.add({ key: '[1]', value: '[2]' });

Drag options to blanks, or click blank then click option'

AX-API-KEY

B12345

CAuthorization

DBearer 12345

Attempts:

3 left

💡 Hint

Common Mistakes

Mixing header key and value.

Using 'Bearer 12345' when the key is 'X-API-KEY'.

The header key should be 'X-API-KEY' and the value should be the actual API key string.

5fill in blank

hard

Fill all three blanks to create a test script that checks if the API key header is present and correct.

Postman

pm.test('API key header is set', () => {
  pm.expect(pm.request.headers.get('[1]')).to.eql('[2]');
  pm.expect(pm.request.headers.has('[3]')).to.be.true;
});

Drag options to blanks, or click blank then click option'

AX-API-KEY

B12345

CAuthorization

Dapi_key

Attempts:

3 left

💡 Hint

Common Mistakes

Using different header names in get and has methods.

Checking for wrong API key value.

The test checks that the header 'X-API-KEY' exists and its value equals the API key '12345'.