An integration test verifies that multiple software components work together as intended. For APIs, it checks that the implemented server follows the design, exposes expected behavior, and remains secure and robust. section 1.5
An API integration-test suite can:
- Validate expected API behavior. section 1.5
- Simulate user flows across the API. section 1.5
- Run alongside fuzz testing and API security testing, which check specification compliance and security. section 1.5
Figure 1.6 Security by design fits into every step of the API development cycle. It encourages us to approach design, implementation, testing, and operations from a security point of view.
Use the API development-cycle figure to place integration testing after implementation and alongside broader security checks. section 1.5
