Who should attend
Manual testers, QA analysts, developers and learners who need to validate service/API behaviour.
Prerequisites
Basic understanding of web applications is helpful. Basic JSON and HTTP concepts can be introduced during the course.
Learning outcomes
- Explain client-server architecture, REST concepts and HTTP communication.
- Construct API requests using methods, URLs, headers, parameters and bodies.
- Validate status codes, headers, response bodies, JSON fields and business rules.
- Test authentication, authorisation, negative cases and error handling.
- Organise reusable requests and environments in Postman.
- Document API defects and produce an API test summary.
Detailed curriculum
8 modules01API and web-service foundations
- What APIs are and how applications communicate
- Client-server, request-response, endpoints, resources and representations
- REST principles and overview of SOAP, GraphQL and webhooks
- HTTP methods: GET, POST, PUT, PATCH and DELETE
- HTTP status-code families and common codes
02HTTP request and response anatomy
- URL, path variables, query parameters and URL encoding
- Headers: Content-Type, Accept, Authorization, Cache-Control and custom headers
- JSON and XML request/response structures
- Cookies, sessions, content negotiation and compression concepts
- Reading API documentation and OpenAPI/Swagger definitions
03Postman setup and request authoring
- Postman workspace, collections, folders and request builder
- Creating requests for each HTTP method
- Path/query parameters, headers, body formats and form-data
- Saving examples, organising collections and using descriptions
- Importing API definitions and documenting endpoints
04Response validation and assertions
- Status code, response time and response headers checks
- JSON structure, data types, required fields and nested objects
- Validating business rules, calculations and data consistency
- JSONPath basics and extracting values from responses
- Assertions and tests in Postman; useful failure messages
05Authentication and authorisation
- API keys, Basic authentication, Bearer tokens and OAuth 2.0 concepts
- Token generation, expiry, refresh and invalid-token scenarios
- Role-based and resource-level access checks
- Positive and negative permission testing
- Handling secrets safely in local environments
06Test data and scenario design
- Positive, negative, boundary and equivalence scenarios
- Required, optional, null, empty and invalid values
- Data dependencies, setup and cleanup patterns
- Chaining requests and passing IDs/tokens between requests
- Idempotency, duplicate submissions and concurrency concepts
07Error handling and advanced API behaviour
- Validation errors and consistent error response structures
- Pagination, sorting, filtering and search parameters
- Rate limiting, throttling, retries and timeout behaviour
- File upload/download and multipart requests
- Webhooks, asynchronous processing and eventual consistency
08Reporting and practical project
- API test strategy, test cases and traceability
- Defect reporting with request, response, environment and correlation ID
- Collection runner, environment variables and test data iteration
- Exporting and sharing collections and reports
- End-to-end API validation for a sample business workflow
How you will practise
Learn through instructor-led sessions using realistic, live applications. Then apply each concept through guided assignments on a separate hands-on practice application, with feedback to help you build practical skills and confidence.
Practical exercises and labs
- Test public/sample REST endpoints using Postman collections.
- Validate CRUD operations and confirm persistence using response data.
- Test token expiry, invalid credentials and role-based access.
- Chain requests to create, retrieve, update and delete a sample record.
Capstone project
Build a Postman collection for a sample CRM or e-commerce API with environment variables, authentication, positive/negative tests, assertions, chained requests and an execution report.
Tools and technologies
Postman, Swagger/OpenAPI viewer, browser developer tools and sample REST APIs.
Assessment approach
- Module-wise knowledge checks or short practical tasks.
- Hands-on exercise review using an agreed checklist or rubric.
- Final project demonstration and explanation of design decisions, test evidence or outputs, as applicable.
- Completion criteria, attendance requirements and any certificate conditions must be separately approved and published by TrainingRite.
Schedule and fees
Upcoming batch schedules are shared by our TrainingRite team. Please submit an enquiry and our team will contact you by email or phone with the latest schedule. TrainingRite does not publish course fees or discounts on the website. Our counselling team will share the applicable course fee and other details with you by email or phone after you submit an enquiry.
Frequently asked questions
Who should join this course?
Manual testers, QA analysts, developers and learners who need to validate service/API behaviour.
Do I need prior experience?
Basic understanding of web applications is helpful. Basic JSON and HTTP concepts can be introduced during the course.
Is the training online?
TrainingRite programmes are delivered online.
Will I get hands-on practice?
Sessions are instructor-led and use realistic applications. You then apply each concept through guided assignments on a separate practice application.
How can I enquire about fees and the next batch?
Fees and batch schedules are not published on the website. Submit the enquiry form on this page and our counselling team will share them with you by email or phone.