Dave Westerveld shows student ways to find or generate the tokens they need for testing.
- [Instructor] We've talked about how to make API calls…with bearer tokens,…but now let's take a look at where you can get them from.…Many sites will give you the option to generate tokens,…usually these tokens can be scoped to authorize…certain actions.…So let's take a look at a real life example of this.…I have a test github account open, and if we go to settings,…here, and then down to developer settings,…we can go to personal access tokens.…And from here we could generate a new token,…so we'll click on that, we could give it a description,…and then we could select what scopes this token has.…
So what things is this user allowed to do,…what is this user authorized for?…Once we've done that, we could generate this token…and then copy it and use it in Postman or another API…testing tool to allow us to do what we need to do.…If your application has this capability, that's probably one…of the simplest ways to get a token.…Of course it's not the only way to get a token,…and that's good because not every application provides us…
- Reviewing API terminology
- Mitigating risks related to testing APIs
- Mapping out the layout of an API
- API authorization and authentication
- Finding and using bearer tokens
- Testing GET, POST, PUT, and DELETE calls
- Using mocks, stubs, and fakes in API testing
- Testing microservices and the Internet of Things
Skill Level Intermediate
1. Understanding Web Services and APIs
2. Getting Started with API Testing
3. API Authorization
Using OAuth tokens3m 28s
4. Hands-on API Testing
5. Additional API Testing Considerations
Next steps3m 1s
- Mark as unwatched
- Mark all as unwatched
Are you sure you want to mark all the videos in this course as unwatched?
This will not affect your course history, your reports, or your certificates of completion for this course.Cancel
Take notes with your new membership!
Type in the entry box, then click Enter to save your note.
1:30Press on any video thumbnail to jump immediately to the timecode shown.
Notes are saved with you account but can also be exported as plain text, MS Word, PDF, Google Doc, or Evernote.