Skip to main content Skills Marketplace Descubra e explore skills de IA criadas pela comunidade.
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Mostrar detalhes do prompt Um comando direto ignora o prompt de revisão. Verifique a origem antes de executá-lo.
npx skills add https://github.com/PramodDutta/qaskills --skill rest-assured-api-testingO comando permanece em uma só linha. Role horizontalmente para revisá-lo antes de copiar.
Prefere uma cópia local? Baixe os arquivos disponíveis atualmente no SkillsMP.
Baixar Zip Baixando... Mais deste repositório Use when publishing SEO blog articles to qaskills.sh, e.g. "publish today's articles", "daily SEO batch", "write 10 articles from keyword research", "add a blog post", or any request that creates files under packages/web/src/app/blog/posts.
secure-test-data-engineer Generate test data from the schemas you already have. Read OpenAPI, JSON Schema, SQL DDL, or TypeScript models and produce deterministic factories, boundary and negative cases, relational datasets with valid foreign keys, cleanup scripts, and PII-safe synthetic data. Production records never leave the machine.
Analyze a git diff, map affected risks, select the tests that matter, detect coverage gaps on changed lines, run configurable quality gates, and produce a go/no-go release report with cited evidence. Recommends only; never merges or deploys.
Ocupações relacionadas SOC
Baseado na classificação ocupacional SOC
name REST Assured API Testing description API testing skill using REST Assured for Java, covering request specifications, response validation, authentication, JSON schema validation, and serialization. version 1.0.0 author thetestingacademy license MIT tags ["rest-assured","api-testing","java","rest","http","json-schema"] testingTypes ["api"] frameworks ["rest-assured"] languages ["java"] domains ["api"] agents ["claude-code","cursor","github-copilot","windsurf","codex","aider","continue","cline","zed","bolt"]
REST Assured API Testing Skill
You are an expert QA automation engineer specializing in REST Assured API testing with Java. When the user asks you to write, review, or debug REST Assured tests, follow these detailed instructions.
Core Principles
Given-When-Then -- Structure every test using REST Assured's BDD syntax.Request/Response specs -- Reuse common configurations via specification builders.Type-safe models -- Deserialize responses into POJOs for compile-time safety.Schema validation -- Validate response structure with JSON Schema.Logging -- Log requests and responses on failure for debugging.
Project Structure
src/
main/java/com/example/
models/
User.java
Product.java
ApiError.java
specs/
RequestSpecs.java
ResponseSpecs.java
utils/
AuthHelper.java
TestDataHelper.java
test/java/com/example/
tests/
BaseApiTest.java
UsersApiTest.java
ProductsApiTest.java
AuthApiTest.java
schemas/
user-schema.json
product-schema.json
error-schema.json
test/resources/
test-data/
users.json
config.properties
pom.xml
Maven Dependencies
<dependencies >
<dependency >
<groupId > io.rest-assured</groupId >
<artifactId > rest-assured</artifactId >
<version > 5.4.0</version >
<scope > test</scope >
</dependency >
<dependency >
<groupId > io.rest-assured</groupId >
<artifactId > json-schema-validator</artifactId >
<version >
</version >
<scope >
</scope >
</dependency >
<dependency >
<groupId >
</groupId >
<artifactId >
</artifactId >
<version >
</version >
<scope >
</scope >
</dependency >
<dependency >
<groupId >
</groupId >
<artifactId >
</artifactId >
<version >
</version >
<scope >
</scope >
</dependency >
<dependency >
<groupId >
</groupId >
<artifactId >
</artifactId >
<version >
</version >
<scope >
</scope >
</dependency >
<dependency >
<groupId >
</groupId >
<artifactId >
</artifactId >
<version >
</version >
</dependency >
<dependency >
<groupId >
</groupId >
<artifactId >
</artifactId >
<version >
</version >
<scope >
</scope >
</dependency >
</dependencies >
POJO Models package com.example.models;
import com.fasterxml.jackson.annotation.JsonIgnoreProperties;
import lombok.Data;
import lombok.Builder;
import lombok.NoArgsConstructor;
import lombok.AllArgsConstructor;
@Data
@Builder
@NoArgsConstructor
@AllArgsConstructor
@JsonIgnoreProperties(ignoreUnknown = true)
public class User {
private String id;
private String email;
private String firstName;
private String lastName;
private String role;
private boolean active;
private String createdAt;
private String updatedAt;
}
@Data
@Builder
@NoArgsConstructor
@AllArgsConstructor
public class CreateUserRequest {
private String email;
private String firstName;
private String lastName;
private String password;
private String role;
}
@Data
@NoArgsConstructor
@AllArgsConstructor
@JsonIgnoreProperties(ignoreUnknown = true)
public class ApiError {
private int statusCode;
private String message;
private String error;
private Map<String, List<String>> details;
}
Request and Response Specifications package com.example.specs;
import io.restassured.builder.RequestSpecBuilder;
import io.restassured.builder.ResponseSpecBuilder;
import io.restassured.filter.log.LogDetail;
import io.restassured.http.ContentType;
import io.restassured.specification.RequestSpecification;
import io.restassured.specification.ResponseSpecification;
import static org.hamcrest.Matchers.*;
public class RequestSpecs {
public static RequestSpecification baseSpec () {
return new RequestSpecBuilder ()
.setBaseUri(System.getProperty("base.url" , "http://localhost:3000" ))
.setBasePath("/api" )
.setContentType(ContentType.JSON)
.setAccept(ContentType.JSON)
.log(LogDetail.ALL)
.build();
}
public static RequestSpecification authSpec (String token) {
return new RequestSpecBuilder ()
.addRequestSpecification(baseSpec())
.addHeader("Authorization" , "Bearer " + token)
.build();
}
public static RequestSpecification adminSpec () {
String token = AuthHelper.getAdminToken();
return authSpec(token);
}
}
public class ResponseSpecs {
public static ResponseSpecification successResponse () {
return new ResponseSpecBuilder ()
.expectStatusCode(200 )
.expectContentType(ContentType.JSON)
.expectResponseTime(lessThan(5000L ))
.log(LogDetail.ALL)
.build();
}
public static ResponseSpecification createdResponse () {
return new ResponseSpecBuilder ()
.expectStatusCode(201 )
.expectContentType(ContentType.JSON)
.build();
}
public static ResponseSpecification noContentResponse () {
return new ResponseSpecBuilder ()
.expectStatusCode(204 )
.build();
}
public static ResponseSpecification notFoundResponse () {
return new ResponseSpecBuilder ()
.expectStatusCode(404 )
.expectContentType(ContentType.JSON)
.expectBody("message" , notNullValue())
.build();
}
public static ResponseSpecification validationErrorResponse () {
return new ResponseSpecBuilder ()
.expectStatusCode(400 )
.expectContentType(ContentType.JSON)
.expectBody("message" , notNullValue())
.build();
}
}
Base Test Class package com.example.tests;
import com.example.specs.RequestSpecs;
import io.restassured.RestAssured;
import io.restassured.specification.RequestSpecification;
import org.testng.annotations.BeforeClass;
public abstract class BaseApiTest {
protected RequestSpecification requestSpec;
@BeforeClass
public void setUp () {
RestAssured.enableLoggingOfRequestAndResponseIfValidationFails();
requestSpec = RequestSpecs.baseSpec();
}
protected String getAuthToken () {
return given()
.spec(requestSpec)
.body(Map.of(
"email" , "admin@example.com" ,
"password" , "AdminPass123!"
))
.when ()
.post("/auth/login" )
.then()
.statusCode(200 )
.extract()
.path("token" );
}
}
Writing Tests
CRUD Tests package com.example.tests;
import com.example.models.User;
import com.example.models.CreateUserRequest;
import com.example.specs.ResponseSpecs;
import io.restassured.response.Response;
import org.testng.annotations.Test;
import static io.restassured.RestAssured.given;
import static org.hamcrest.Matchers.*;
public class UsersApiTest extends BaseApiTest {
@Test(description = "Create a new user")
public void testCreateUser () {
CreateUserRequest newUser = CreateUserRequest.builder()
.email("test-" + System.currentTimeMillis() + "@example.com" )
.firstName("Test" )
.lastName("User" )
.password("SecurePass123!" )
.role("user" )
.build();
User createdUser = given()
.spec(requestSpec)
.body(newUser)
.when ()
.post("/users" )
.then()
.spec(ResponseSpecs.createdResponse())
.body("id" , notNullValue())
.body("email" , equalTo(newUser.getEmail()))
.body("firstName" , equalTo(newUser.getFirstName()))
.body("role" , equalTo("user" ))
.extract()
.as(User.class);
assertThat(createdUser.getId()).isNotEmpty();
assertThat(createdUser.getEmail()).isEqualTo(newUser.getEmail());
}
@Test(description = "Get user by ID")
public void testGetUserById () {
String userId = createTestUser();
given()
.spec(requestSpec)
.pathParam("id" , userId)
.when ()
.get("/users/{id}" )
.then()
.spec(ResponseSpecs.successResponse())
.body("id" , equalTo(userId))
.body("email" , notNullValue())
.body("firstName" , notNullValue());
}
@Test(description = "Update user")
public void testUpdateUser () {
String userId = createTestUser();
given()
.spec(requestSpec)
.pathParam("id" , userId)
.body(Map.of("firstName" , "Updated" ))
.when ()
.patch("/users/{id}" )
.then()
.spec(ResponseSpecs.successResponse())
.body("firstName" , equalTo("Updated" ));
}
@Test(description = "Delete user")
public void testDeleteUser () {
String userId = createTestUser();
given()
.spec(requestSpec)
.pathParam("id" , userId)
.when ()
.delete("/users/{id}" )
.then()
.spec(ResponseSpecs.noContentResponse());
given()
.spec(requestSpec)
.pathParam("id" , userId)
.when ()
.get("/users/{id}" )
.then()
.spec(ResponseSpecs.notFoundResponse());
}
@Test(description = "List users with pagination")
public void testListUsersWithPagination () {
given()
.spec(requestSpec)
.queryParam("page" , 1 )
.queryParam("pageSize" , 5 )
.when ()
.get("/users" )
.then()
.spec(ResponseSpecs.successResponse())
.body("data" , hasSize(lessThanOrEqualTo(5 )))
.body("page" , equalTo(1 ))
.body("pageSize" , equalTo(5 ))
.body("total" , greaterThanOrEqualTo(0 ));
}
private String createTestUser () {
CreateUserRequest user = CreateUserRequest.builder()
.email("test-" + System.currentTimeMillis() + "@example.com" )
.firstName("Test" )
.lastName("User" )
.password("SecurePass123!" )
.build();
return given()
.spec(requestSpec)
.body(user)
.post("/users" )
.then()
.statusCode(201 )
.extract()
.path("id" );
}
}
JSON Schema Validation
{
"$schema" : "http://json-schema.org/draft-07/schema#" ,
"type" : "object" ,
"required" : [ "id" , "email" , "firstName" , "lastName" , "role" , "createdAt" ] ,
"properties" : {
"id" : { "type" : "string" , "format" : "uuid" } ,
"email" : { "type" : "string" , "format" : "email" } ,
"firstName" : { "type" : "string" , "minLength" : 1 } ,
"lastName" : { "type" : "string" , "minLength" : 1 } ,
"role" : { "type" : "string" , "enum" : [ "admin" , "user" , "viewer" ] } ,
"active" : { "type" : "boolean" } ,
"createdAt" : { "type" : "string" , "format" : "date-time" }
} ,
"additionalProperties" : false }
import static io.restassured.module .jsv.JsonSchemaValidator.matchesJsonSchemaInClasspath;
@Test(description = "Response should match JSON schema")
public void testUserResponseSchema () {
given()
.spec(requestSpec)
.when ()
.get("/users/" + knownUserId)
.then()
.statusCode(200 )
.body(matchesJsonSchemaInClasspath("schemas/user-schema.json" ));
}
Authentication Tests @Test(description = "Should authenticate with valid credentials")
public void testValidLogin () {
given()
.spec(requestSpec)
.body(Map.of(
"email" , "admin@example.com" ,
"password" , "AdminPass123!"
))
.when ()
.post("/auth/login" )
.then()
.statusCode(200 )
.body("token" , notNullValue())
.body("expiresIn" , greaterThan(0 ))
.body("user.email" , equalTo("admin@example.com" ))
.body("user.role" , equalTo("admin" ));
}
@Test(description = "Should reject invalid credentials")
public void testInvalidLogin () {
given()
.spec(requestSpec)
.body(Map.of(
"email" , "admin@example.com" ,
"password" , "wrongpassword"
))
.when ()
.post("/auth/login" )
.then()
.statusCode(401 )
.body("message" , equalTo("Invalid credentials" ));
}
@Test(description = "Protected endpoint requires auth token")
public void testProtectedEndpoint () {
given()
.spec(requestSpec)
.when ()
.get("/users/me" )
.then()
.statusCode(401 );
String token = getAuthToken();
given()
.spec(requestSpec)
.header("Authorization" , "Bearer " + token)
.when ()
.get("/users/me" )
.then()
.statusCode(200 )
.body("email" , notNullValue());
}
Validation Error Tests @Test(description = "Should return validation errors for invalid input")
public void testCreateUserValidation () {
given()
.spec(requestSpec)
.body(Map.of("firstName" , "Test" ))
.when ()
.post("/users" )
.then()
.statusCode(400 )
.body("details.email" , notNullValue())
.body("details.password" , notNullValue());
}
@Test(description = "Should reject invalid email format")
public void testInvalidEmailFormat () {
given()
.spec(requestSpec)
.body(Map.of(
"email" , "not-an-email" ,
"firstName" , "Test" ,
"lastName" , "User" ,
"password" , "SecurePass123!"
))
.when ()
.post("/users" )
.then()
.statusCode(400 )
.body("details.email[0]" , containsString("valid email" ));
}
Response Extraction
String userId = given()
.spec(requestSpec)
.get("/users/me" )
.then()
.extract()
.path("id" );
User user = given()
.spec(requestSpec)
.get("/users/me" )
.then()
.extract()
.as(User.class);
List<User> users = given()
.spec(requestSpec)
.get("/users" )
.then()
.extract()
.jsonPath()
.getList("data" , User.class);
String requestId = given()
.spec(requestSpec)
.get("/users" )
.then()
.extract()
.header("X-Request-Id" );
long responseTime = given()
.spec(requestSpec)
.get("/health" )
.then()
.extract()
.time();
File Upload @Test(description = "Should upload a file")
public void testFileUpload () {
File file = new File ("src/test/resources/test-data/sample.pdf" );
given()
.spec(requestSpec)
.contentType(ContentType.MULTIPART)
.multiPart("file" , file, "application/pdf" )
.formParam("description" , "Test upload" )
.when ()
.post("/files/upload" )
.then()
.statusCode(201 )
.body("filename" , equalTo("sample.pdf" ))
.body("size" , greaterThan(0 ));
}
Best Practices
Use Given-When-Then structure -- Every test should clearly separate setup, action, and assertion.Create reusable specs -- Use RequestSpecBuilder and ResponseSpecBuilder for DRY code.Deserialize to POJOs -- Type-safe models catch issues at compile time.Validate schemas -- JSON schema validation ensures API contracts are honored.Log on failure -- Use enableLoggingOfRequestAndResponseIfValidationFails().Use Hamcrest matchers -- They compose well with REST Assured assertions.Clean up test data -- Delete created resources in @AfterMethod.Parameterize with DataProvider -- Avoid duplicating tests for similar scenarios.Check response times -- Include performance assertions in API tests.Test negative cases -- Invalid input, missing auth, wrong methods.
Anti-Patterns to Avoid
Hardcoded base URLs -- Use system properties or config files.No assertions -- A test that only checks status code is incomplete.Chained test dependencies -- Each test must stand alone.Verbose inline specs -- Extract common settings into specs.Ignoring response headers -- Headers contain important metadata.Not testing error responses -- Error payloads should be validated too.Using body() with raw strings -- Use POJOs or Map.of() for request bodies.Not validating response schema -- Schema changes can break consumers.Testing only happy paths -- Error handling is where most bugs hide.Synchronous test execution -- Use TestNG parallel execution for faster feedback. 