Lesson 1
Status code is only transport evidence
A 200 response says little about whether the correct business outcome occurred.
Validate schemas, business invariants, negative paths, idempotency and downstream state instead of stopping at status codes.
Learning outcomes
Guided lessons
Lesson 1
A 200 response says little about whether the correct business outcome occurred.
Lesson 2
Validate required fields, types, formats and compatibility because consumers depend on stable contracts.
Lesson 3
Test rules that must remain true across every request, such as totals, permissions, ownership and lifecycle constraints.
Lesson 4
Exercise malformed, missing, duplicated, unauthorised and out-of-range inputs intentionally.
Lesson 5
Validate databases, events, downstream APIs and retries where a request causes broader system change.
Hands-on practice
Do not just tick these mentally. Write the query, create the test matrix, refactor the code, or document the decision. Practical evidence is the point.