Introduction to Postman:
API Testing Made Easy
Md Nazmul Haque Arif
Outline ●
●
Session Objectives
Introduction to APIs
● Introduction to Postman
● Working with APIs
● Postman Collections and
Environments
● Testing and Automation Features in
Postman
Session Objectives
● Understanding APIs
● Utilize Postman for API testing, with and without authentication.
● Learn about test scripts within Postman.
Introduction to What are APIs?
APIs ● Interfaces allow applications to
communicate and exchange data.
● Crucial for modern development
(mobile apps, web services)
Introduction to HTTP vs HTTPS:
APIs ● Client-server communication
protocols
● HTTPS offers secure connections with
SSL/TLS encryption.
Introduction to Key Components:
APIs ● URL: Address of the resource being
requested.
● Headers: Additional information sent
with the request.
● Body: Data sent with the request
(usually with POST, PUT).
● Cookies: Information stored on the
client-side for session management.
Introduction to Request Methods:
APIs ● GET: Retrieves data from the server.
● POST: Sends data to the server (e.g.,
creating a new resource).
● PUT: Updates an existing resource.
● PATCH: Partial updates to a resource.
● DELETE: Removes a resource.
Introduction to Status Codes:
APIs ● 200: OK (request successful)
● 201: Created (new resource created)
● 400: Bad Request (invalid request
syntax)
● 401: Unauthorized (missing or invalid
authentication)
● 404: Not Found (requested resource
not found)
● 500: Internal Server Error
(server-side issue)
Introduction to What is Postman?
Postman A powerful tool for building, testing, and
managing APIs.
Introduction to Postman Interface Overview:
Postman Workspaces: Organize collections of API
requests.
Collections: Group related API requests for
specific purposes.
Request Builder: Area to construct and send
API requests (specify method, URL, headers,
body).
Introduction to Working with Open APIs (No
Authentication)
Postman
Introduction to Working with Protected APIs
(Authentication required)
Postman
Why API Authentication?
Secure sensitive data and control access to
resources.
Introduction to Types of API Authentication:
Postman
● API Key: Provided by the API
provider, sent in headers or query
parameters.
● Basic Authentication: Encode
username/password in the request.
● OAuth 2.0: A token-based
authentication method where access
token used to securely access APIs
without sharing credentials
Introduction to Postman Collections and
Environments
Postman
Introduction to Testing and Automation Features
in Postman
Postman
Questions?
