30 Days of API Testing Day 7: Complete Exercise 1

I tested the InfoService from this SOAP API: http://zero.webappsecurity.com/web-services/, using the SoapUI and JMeter.

SoapUI

  • I got all supported requests generated by the tool, as it reads from the WSDL
  • I couldn’t find a way to change the generated requests, so I couldn’t change the method (WSDL allows only POST)

JMeter

  • intended for performance testing, but a colleague recommended it to me for API testing as well
  • it cannot generate requests from WSDL, so I had to setup the headers and body manually
  • I tested POST and GET for this API, where POST was successful and GET returned error 500 for the same request, as it is not supported

2 Likes