WEB SERVICES TESTING

BY- AMOL REDDY

WHAT IS WEB SERVICE ?
QA POINT OF VIEW

/ User

Testing Request & Response of two services

Simple Example of Communication of services-
SOAP Message—transport message protocol
(Network layer)
A/C & Mobile no.----XML/SOAP Message/ request

Google SBI
Pay Server/
service
Verify---XML//SOAP Message/ response

GPay- Angular SBI- Java

Important Terms of Web Service Testing-
Ex. Business need Swiggy order -

1. Location – Geo locator service (Google service)

2. Restaurant – Swiggy Restaurant / menu
download service (Swiggy service)
3. Payment – Payment gateway service
Important Terms of Web Service Testing-

Manual Testing Web service Testing

UI is require/ Frond end No require any UI/Frond

System & Fun Testing, UI Testing System & Fun Testing

Application/ Build required for URL / URI (Rest service), WSDL

testing file (SOPA service) required for

Testing
Important Terms of Web Service Testing-

XML— extreme mark-up language- Html, Header,

Body, Div, Fault

SOAP message (simple object access protocol)—

envelope, Header, Body, Fault

WSDL File/Service—data type, elements, message,

binding

UDDI– all WSDL file store/ repository

Important Terms of Web Service Testing-

SOAP message (simple object access protocol)—

1. Eenvelope – SOAP Message
2. Header – Service access, authorization
3. Body- main part of SOAP message
4. Fault – Error message

WSDL—data type, elements, message, binding

UDI– all WSDL file store/ repository

Important Terms of Web Service Testing-

WSDL file (Web service descriptive langue's)—

1. Data type – data type of data present in the
service
2. Elements - Which operation perform on data
3. Message – Functionality of service, In UDDI
location of WSDL file
4. Binding – To combine all service

UDDI (Universal description discovery integration)–

all WSDL file store/ repository
EXAMPLES

HTTP://WWW.XIGNITE.COM/XCURR
ENCIES.ASMX?WSDL
Classification of Web Services-
SOAP Service REST Service
SOAP stands for Simple Object Access REST stands for Representational State
Protocol. Transfer.
SOAP services used for web-based Rest services used for web based, Mobile
application only based, Desktop based application
SOAP services are largely based on XML REST services use multiple standards like
HTTP, JSON, URL, and XML
SOAP uses XML for request & response Rest uses HTTP/URL/ JSON for request
& response like HTML, Text, JSON,
XML etc
For testing SOPA service we require For testing REST service, we require
WSDL file URL/ URI
SOAP (designed) is a protocol. REST (designed) is an architectural style.
Performance wise Requires more Requires fewer bandwidth
bandwidth
SOAP supports SSL security REST supports SSL & HTTPS security
It is taking more time to respond It is faster for response
Type of Request/ Methods- S1 S2

1. GET Method/ Request- GET is used to get data from a

resource – similar select to statement

2. POST Method/ Request- - POST is used to send data to

a server to create a resource – Similar Insert to statement

3. Patch Method/ Request- Patch requests are to make

partial update on a resource - Similar update to statement

4. PUT Method/ Request- PUT is used to send data to a

server to update a resource - Similar update to statement

5. DELETE Method/ Request- The DELETE method

deletes the specified resource - Similar delete to statement
Type of Request/ Methods-
Service 1 ------------------- Service 2 (First name,
Mob no, Last name, Addre,
PAN no, Adhar no)

PUT request- Update only PAN no.

-(First name, Mob no, Last name, Addre, PAN no, Aadhar
no)
- Slow update

PATCH request- Update only PAN no.

-(PAN no)
- Very fast
What is CRUD-
Most REST APIs implement CRUD: Create, Retrieve,
Update, and Delete.

We can map these operations into CRUD.

POST—Create / Insert
GET—Retrieve
PUT / PATCH—Update
DELETE—Delete
Check balance --- Request/ GET request– read/select

Insert UPI--- Request/ POST request---create

Update UPI ---- Request/Put request -- Update

SBI
Google Pay
Server/
service

Delete A/C ---- Request/Delete request – delete

Modify UPI– Request/ Patch request – single update

SO WHAT TO TEST IN WEB SERVICE TESTING ?

1. Validating SOAP/Rest response

2. Validating Data and count of data in response
3. Validating Tagname/Attributes presents in responses
4. Validating Status code in responses
5. Validating Time taken for responses
6. Applying Assertion for verification
7. Validating the Functionality
8. Validating NEGATIVE test cases !

ex. Available balance = 3000000 Rs

Different status code-
1.Successful responses (2XX)
2.Server errors (4XX)
3.Internal errors (5XX)

Theses status code will define by developer

Successful responses (2XX)
200 -OK The request has succeeded. The meaning of the success
depends on the HTTP method – ex. GET
201- The request has succeeded and a new resource has been
Created created as a result. This is typically the response sent
after POST requests,
202 – If data will sent to server for storing purpose- ex. PUT /
Accepted PATCH
204 - No If unique data sent to server then it sent no content . Ex.
Content POST, PUT, PATCH, DELETE
 Server errors (4XX)- Server 2
400 - Bad The server could not understand the request due to invalid
Request syntax/Data
401 - If invalid authorization will be provided in request
Unauthorized
403 - The client does not have access rights to the content. It will
Forbidden go to some intermediate state.
404 - Not The server can not find the requested resource. In the
Found browser, this means the URL is not recognized.
405 - Method The request method is known by the server but has been
Not Allowed disabled and cannot be used.

internal errors (5XX)- Server 1

500 - Internal The server has encountered a situation it doesn't know how
Server Error to handle.
501 - Not The request method is not supported by the server and
Implemented cannot be handled.
503 - Service The server is not ready to handle the request. Common
Unavailable causes are a server that is down for maintenance or that is
overloaded.
Real example-
GETmethod-

http://www.xignite.com/xCurrencies.asmx?wsdl

Currency of country- IND, currency - Rupess

Valid HTTP status code – 200 OK Response

timeout !>= 0.5 s

Negative cases (checkstatus):

- incorrect country
- incorrect currency
TOOLS FOR TESTING-
1. SOAPUI TOOL- SOAP, REST FULL SERVICES
2. POSTMAN TOOL – REST FULL SERVICES
Steps for testing-

1. Open tool
2. Go to file and click on new SOAP request
3. Copy WSDL file link into SOAP request tab & press ok
4. Open one responses
5. Fill the “?” place in SOAP request of xml format
SOAP SERVICE & REST METHOD TEST USING
SOAPUI TOOL-
Sr. Action/ Test Cases Expected Result Statu Pass
No Method s code /Fail
1 Verify that SOAP In response we are 200 - P
Get- response of getting valid data ok
respective web
http://www service
.dneonline.
2 Verify that for In response we 400 – P
com/calcul
invalid SOAP should get “Bad Bad
ator.asmx?
response of request” reques
wsdl-
respective web t
service
ADD
3 Service Verify that SOAP Value should be 200 - P
response should present in integer ok
contain valid integer Ex. 3 + 9 = 12
no. for valid request
of integer no.
4 Verify that SOAP Response should 400 – F
response should contain fault Bad
contain invalid messages reques
integer no. (0.88, one) t
in request
REST METHOD TEST USING POSTMAN TOOL-
Collection-
 Postman Collections are a group of saved requests you
can organize into folders
How to lock defect in web service testing-
1. Open tool “JIRA/HPALM”
2. Add description of Defect – Verify that for hitting service for
invalid test data response should show ‘400- bad request’ status code
3. Add a picture-

4. Assign defect to developer

5. Sent mail to all team through toolset
Tool used in web service testing-

JIRA/ HPALM/ TFS tools- new/User Story assign, Defect,

test cases --- project management tool

Testing tool for web service- SOAPUI , POSTMAN

Developer server for storing web service link- Swagger,

Tomcat server
URL & URI-

URL – UNIFORM RESOURCE LOCATOR

URI- UNIFORM RESOURCE IDENTIFIER
EX.
HTTPS://REQRES.IN/API/USERS?PAGE=2
WHERE
URL/DOMAIN – HTTPS://REQRES.IN
URI- HTTPS://REQRES.IN/API/USERS?PAGE=2
URL CONTAINS URL & OTHER PART
CONTAINS
1. PARAMETERS/RESOURCE/API/USERS
2. PARAMETER VALUES/ QUERY STRINGAFTER ?
MARK EX. PAGE=2
URI= URL +RESOURCE +PARAMETER VALUE
Difference between Web Service & API-
Web Service API
Web service serve as a means of API” stands for Application
communication Programming Interface
Web service is used to communicate An API used as an interface between two
between two machines over a network different applications for communicating
with each other
Web services require a Network APIs are Protocol agnostic

A web service require a Network for it’s A API service not require a Network for
operation it’s operation
Web service only support only XML API service only support XML & JSON

Web service uses SOAP, REST as a means API may use any communication to
of communication initiate interaction between applications
Soap, RESET, RPC, XML-RPC, Resfull
Service etc
All web services are APIs Not all APIs are web services
Questions-

1. How much experience you have in web service testing/API?

2. What is difference between SOAP & REST service?
3. How you are tested web service testing/API ? Tell the Process?
4. What you validate in web service testing/API
5. What are different status code & meaning?
6. What are different type of method as GET, POST, PUT, PATCH,
DELETE
7. What is procedure for testing web services in POSTMAN Tool.
8. What is difference between URI & URL
9. What is difference between Web service & API
10. What is difference between Authorization& authentication
11. What is ResAssured?-
Ans - API service then I will use ResAssured library for doing
Automation.
Questions-

11. Facing problem in API testing?

Ans- 1. Understanding the functionality API
2. Status code are not standard (Becz developers are keeping randomly
any status code)
3. Expected result should know as tester, If not know then i will missed
defects

12. What is collection?