Why API testing validates backend logic in Testing Fundamentals - Test Execution Impact

Test Overview

This test checks if the backend API correctly processes a user login request. It verifies that the API returns the expected success message and status code, confirming the backend logic works as intended.

Test Code - PyTest

Testing Fundamentals

import requests

def test_user_login_api():
    url = "https://example.com/api/login"
    payload = {"username": "testuser", "password": "testpass"}
    response = requests.post(url, json=payload)
    assert response.status_code == 200
    json_data = response.json()
    assert json_data.get("message") == "Login successful"
    assert "token" in json_data

if __name__ == "__main__":
    test_user_login_api()

Execution Trace - 6 Steps

Step	Action	System State	Assertion	Result
1	Test starts	Test environment ready, network connection available	—	PASS
2	Sends POST request to https://example.com/api/login with username and password	Request sent to backend API endpoint	—	PASS
3	Receives response from API with status code and JSON body	Response received: status 200, body contains message and token	Check if status code is 200	PASS
4	Parses JSON response and verifies 'message' equals 'Login successful'	JSON parsed, message field extracted	Assert message == 'Login successful'	PASS
5	Verifies that 'token' field exists in JSON response	JSON parsed, token field checked	Assert 'token' in response JSON	PASS
6	Test ends successfully	All assertions passed, backend logic validated	—	PASS

Failure Scenario

Failing Condition: API returns status code other than 200 or missing expected fields

Execution Trace Quiz - 3 Questions

What does the test verify about the API response?

A That the frontend UI displays the login form

B That the status code is 200 and response contains expected fields

C That the database schema is correct

D That the network connection is slow

Key Result

API testing directly checks backend logic by sending requests and validating responses, ensuring the server processes data correctly without relying on the user interface.

Practice

1. Why is API testing important for validating backend logic?

easy

A. Because it checks the server's response and business rules directly

B. Because it tests the colors and layout of the user interface

C. Because it only tests the database without any requests

D. Because it focuses on hardware performance

Solution

1. Step 1: Understand what API testing does and compare options

   API testing sends requests to the backend and checks the responses to verify logic and data handling. Only "Because it checks the server's response and business rules directly" correctly states that API testing checks server responses and business rules directly.

2. Final Answer:

   Because it checks the server's response and business rules directly -> Option A

3. Quick Check:

   API testing validates backend logic = Because it checks server response [OK]

Hint: API testing checks backend responses, not UI or hardware [OK]

Common Mistakes:

• Confusing API testing with UI testing
• Thinking API tests hardware or database only
• Assuming API testing is only about data storage

2. Which of the following is the correct way to send a GET request in an API test using JavaScript fetch?

easy

A. fetch('https://api.example.com/data', { method: 'DELETE' })

B. fetch('https://api.example.com/data', { method: 'POST' })

C. fetch('https://api.example.com/data', { method: 'GET' })

D. fetch('https://api.example.com/data', { method: 'PUT' })

Solution

1. Step 1: Identify the HTTP method for GET request and match in fetch options

   The GET method is used to retrieve data from the server. fetch('https://api.example.com/data', { method: 'GET' }) uses method: 'GET', which is correct for fetching data.

2. Final Answer:

   fetch('https://api.example.com/data', { method: 'GET' }) -> Option C

3. Quick Check:

   GET request uses method 'GET' in fetch [OK]

Hint: GET requests use method 'GET' in fetch options [OK]

Common Mistakes:

• Using POST or other methods instead of GET for data retrieval
• Omitting the method option (defaults to GET but unclear)
• Confusing HTTP methods in fetch

3. Consider this Python code snippet for API testing using requests library:

response = requests.post('https://api.example.com/login', json={'user':'test', 'pass':'1234'})
print(response.status_code)

What will be the output if the login is successful?

medium

A. 200

B. 404

C. 500

D. 401

Solution

1. Step 1: Understand HTTP status codes for API responses and match with success

   A successful POST request usually returns status code 200 (OK) or 201 (Created). Here, 200 is expected for successful login. Options 404 (Not Found), 500 (Server Error), and 401 (Unauthorized) indicate failure or errors.

2. Final Answer:

   200 -> Option A

3. Quick Check:

   Successful API call returns 200 status code [OK]

Hint: Success status code is 200 in API responses [OK]

Common Mistakes:

• Confusing 401 Unauthorized with success
• Thinking 404 means success
• Assuming 500 means success

4. You wrote this API test code snippet in JavaScript:

const response = await fetch('https://api.example.com/items', { method: 'GET' });
const data = await response.json();
console.log(data.items.length);

But the test fails with error: TypeError: Cannot read property 'length' of undefined. What is the likely cause?

medium

A. The URL is missing a trailing slash

B. The fetch method should be 'POST' instead of 'GET'

C. The await keyword is used incorrectly

D. The response JSON does not have an 'items' property

Solution

1. Step 1: Analyze the error message and check response structure

   The error says 'length' of undefined, meaning data.items is undefined. If the JSON response lacks 'items', accessing data.items.length causes this error.

2. Final Answer:

   The response JSON does not have an 'items' property -> Option D

3. Quick Check:

   Undefined property causes length error [OK]

Hint: Check if JSON property exists before accessing length [OK]

Common Mistakes:

• Changing HTTP method unnecessarily
• Misusing await keyword
• Assuming URL format causes this error

5. You want to test a backend API that calculates discounts based on user type and purchase amount. Which API testing approach best validates the backend logic?

hard

A. Test only the frontend UI to see if discount shows correctly

B. Send requests with different user types and amounts, then verify the discount in the response

C. Check the database directly without sending API requests

D. Run performance tests to measure response time only

Solution

1. Step 1: Identify what validates backend logic and compare options

   Sending requests with varied inputs and checking responses tests the business rules implemented in backend. "Send requests with different user types and amounts, then verify the discount in the response" sends inputs and verifies outputs, directly testing backend logic. Other options miss backend logic validation.

2. Final Answer:

   Send requests with different user types and amounts, then verify the discount in the response -> Option B

3. Quick Check:

   API tests validate logic by input-output checks [OK]

Hint: Test backend logic by varying inputs and checking outputs [OK]

Common Mistakes:

• Testing only UI without backend verification
• Skipping API requests and checking database only
• Focusing on performance instead of logic correctness