Contract testing ensures that changes in the _________ do not break the contract established between services.
- Data Structure
- Network Protocol
- Source Code
- Service Interfaces
In contract testing, the focus is on the contract between services. Changes in service interfaces (Option 4) need to be carefully managed to ensure that contracts remain intact, preventing disruptions in communication.
Negative testing often involves sending ________ types of data to check for API robustness.
- Invalid
- Null
- Random
- Valid
Negative testing involves sending invalid types of data to check how well the API handles unexpected inputs. Valid data is used in positive testing, not negative testing.
In API security, what is the purpose of an access token in OAuth?
- Authenticate the Client
- Authorize the Client
- Identify the Resource Server
- Identify the User
The access token in OAuth is primarily meant to identify the user who authorized the application, allowing the application to access resources on behalf of that user. It does not necessarily identify the client or resource server.