API Testing Guide

Comprehensive API validation covering functional correctness, security, and performance across all services and third-party integrations.

Test Strategy

When setting up API tests for a new service, create a base test class with shared auth, retry logic, and response validation helpers before writing individual test cases. This prevents duplicated setup code and ensures consistent assertion patterns across the suite.

See Test Suite for the full vitest + fetch test suite code.

Security Checklist

Cover the OWASP API Security Top 10 in every test suite: