postman
More than manual API Testing
A Presentation
by Ronak Raithatha
Agenda
Introduction
Problem Statement
Automated Testing
Uptime Monitoring
Q&A
Access Control
Introduction
Software Engineer for 8 years.
Working as a product engineer, consultant,
infrastructure engineer, and contractor.
Currently:
I am contracted as an engineering lead by my old CTO from Somo.
I lead a team of 2 React Native engineers, 1 QA and 1 UX designer.
Technical Background
Introduction
- Taught the MEAN stack, Git/GitHub, and OOP at a local Bootcamp for 2 years.
-
Taught Introduction to Programming
at a local high school for 2 years.
- Excited to work at the intersection of Technology, Business, and People.
-
Craving more direct user impact.
Introduction
extracurriculars
DRive for Change
Introduction
- I am an avid Dungeons & Dragons player.
- I enjoy playing video games with my friends and love improving my desk setup.
About Me
- Recently bought a house and I have a small identity crisis every time I buy a tool at Home Depot.
Problem Statement
The Client
A Weather API Company that provides and API through Postman.
Looking at Postman features for help with Access Control, Automated Testing, and Monitoring.
Problem Statement
Granular Access Control
I am looking into the possibility of using Postman in my team. From my initial investigations, it looks like the content created within my Postman team is visible and editable to anyone on the team.
This is great but concerns me from a workflow/compliance perspective. Can you tell me how Postman handles this?
Problem Statement
Automated Testing
We are looking to bolster our API testing during the CI/CD process.
How can Postman help me with testing automation?
Problem Statement
API UPTIME
Since customers will be using our API on the Postman platform, I would like to be notified if my API ever stops responding.
What sort of monitoring tools does Postman provide?
Granular Access Control
Role-Based Access Control
Postman provides Role-Based Access Control (RBAC) for specific and granular access to individuals. This promotes regulation on access, and separation of concerns among team members.
These roles can be applied to individuals at a team level, workspace level, element level, or even more granularly to APIs, Environments, Mock servers, and Monitors.
Roles can be applied to groups of individuals as well, this is a feature available in the Enterprise Plan.
Granular Access Control
Role-Based Access Control
Some examples of roles at a team level include:
- Super Admin: Manages high-level access to all controls within Postman
- Admin: Manages access within teams
- Billing: Manages team plan and payments
- Developer: Has access to all team resources and workspaces
Automated Testing
Forms of Automated Testing
Testing an API is an integral part of using Postman, right after exposing an API.
Postman offers 3 ways to help with testing automation:
Collection Runners, Newman, and Monitors.
For Automated Testing, we will focus on the Collection Runners and Newman.
The backbone of all those automation features are Tests. Tests are written in Postman and are run right after a request is completed.
Automated Testing
Collection Runners
The Collection Runner is a waterfall automation of all the tests written in a Collection.
The Collection Runner allows running API requests in a specified request, allows for data to be passed between requests, and logs all request and response test data.
DEMO Time: Collection Runners
Automated Testing
NewMAn
Newman is an open-source library developed by Postman that allows programmatic execution of Collection Runners.
DEMO Time: NewMan
Newman's CLI is handy when writing scripts running Collection Runners in your CI/CD pipelines.
Uptime Monitoring
Monitors
Monitors in Postman allow you to run certain Collection Runners at specific time intervals.
DEMO Time: Monitors
These monitors can be configured to alert on any failures via email or through integrations to Slack or other channels.
Q & A
Helpful Links
Copy of Postman
By Ronak Raithatha
Copy of Postman
- 383