Skip to main content
QATraining
Career EngineSkillsToolsPromptsGuidesCommunity
All Collections
advanced

API Security & Advanced Patterns

Harden your API with OWASP Top 10 security tests, GraphQL depth/complexity limits and auth checks, and OpenAPI contract validation — a complete advanced API quality suite.

~35 min3 prompts

Prompts in this Collection

  1. 1

    OWASP API Security Top 10 Test Suite

    Generate security tests covering OWASP API Security Top 10: broken auth, excessive data exposure, injection, and more.

    All ten OWASP API Security vulnerabilities with setup/teardown and clear assertion patterns.

    advanced
    jest
  2. 2

    GraphQL API Test Suite

    Generate typed GraphQL tests covering queries, mutations, pagination, error handling, auth, depth limits, and N+1 detection — using graphql-request with Jest and codegen types.

    GraphQL-specific security: depth limits, complexity scoring, introspection checks, RBAC assertions.

    advanced
    jest
  3. 3

    Generate API Contract Tests from OpenAPI Spec

    Create a production-grade API contract test suite that validates response schemas, status codes, headers, and error payloads against an OpenAPI 3.0 spec.

    Contract testing as a second security layer — drift from spec often signals an unintended data exposure.

    advanced
    playwright