Full Stack Testing

Spis treści książki

• Foreword
• Preface
  • Why I Wrote This Book
  • Who Should Read This Book?
  • Navigating This Book
  • Conventions Used in This Book
  • OReilly Online Learning
  • How to Contact Us
  • Acknowledgments
• 1. Introduction to Full Stack Testing
  • Full Stack Testing for High Quality
  • Shift-Left Testing
  • Ten Full Stack Testing Skills
  • Key Takeaways
• 2. Manual Exploratory Testing
  • Building Blocks
    • Exploratory Testing Frameworks
      • Equivalence class partitioning
      • Boundary value analysis
      • State transition
      • Decision table
      • Cause-effect graphing
      • Pairwise testing
      • Sampling
      • Error guessing method
    • Exploring a Functionality
      • Functional user flows
      • Failures and error handling
      • The UI look and feel
      • Cross-functional aspects
  • Manual Exploratory Testing Strategy
    • Understand the Application
    • Explore in Parts
    • Repeat Exploratory Testing in Phases
  • Exercises
    • API Testing
      • Postman
      • WireMock
    • Web UI Testing
      • Browsers
      • Bug Magnet
      • Chrome DevTools
  • Perspectives: Test Environment Hygiene
  • Key Takeaways
• 3. Automated Functional Testing
  • Building Blocks
    • Introduction to Micro and Macro Test Types
      • Unit tests
      • Integration tests
      • Contract tests
      • Service tests
      • UI functional tests
      • End-to-end tests
  • Automated Functional Testing Strategy
  • Exercises
    • UI Functional Tests
      • JavaSelenium WebDriver framework
        • Prerequisites
        • Maven
        • TestNG
        • Selenium WebDriver
        • Page Object Model
        • Setup and workflow
      • JavaScriptCypress Framework
        • Prerequisites
        • Cypress
        • Setup and workflow
    • Service Tests
      • Prerequisites
      • JavaREST Assured Framework
        • Setup and workflow
    • Unit Tests
      • JUnit
        • Setup and workflow
  • Additional Testing Tools
    • Pact
    • Karate
    • AI/ML Tools in Automated Functional Testing
      • Test authoring
      • Test maintenance
      • Test report analysis
      • Test governance
  • Perspectives
    • Antipatterns to Overcome
      • The ice cream cone
      • The cupcake
    • 100% Automation Coverage!
  • Key Takeaways
• 4. Continuous Testing
  • Building Blocks
    • Introduction to Continuous Integration
    • The CI/CT/CD Process
    • Principles and Etiquette
  • Continuous Testing Strategy
    • Benefits
  • Exercise
    • Git
      • Setup
      • Workflow
    • Jenkins
      • Setup
      • Workflow
  • The Four Key Metrics
  • Key Takeaways
• 5. Data Testing
  • Building Blocks
    • Databases
    • Caches
    • Batch Processing Systems
    • Event Streams
  • Data Testing Strategy
  • Exercises
    • SQL
      • Prerequisites
      • Workflow
        • Create
        • Insert
        • Select
        • Filtering and grouping
        • Sorting
        • Functions and operators
        • Expressions and predicates
        • Nested queries
        • Joins
        • Update and delete
    • JDBC
      • Setup and workflow
    • Apache Kafka and Zerocode
      • Setup
      • Workflow
  • Additional Testing Tools
    • Test Containers
    • Deequ
  • Key Takeaways
• 6. Visual Testing
  • Building Blocks
    • Introduction to Visual Testing
    • Project/Business-Critical Use Cases
  • Frontend Testing Strategy
    • Unit Tests
    • Integration/Component Tests
    • Snapshot Tests
    • Functional End-to-End Tests
    • Visual Tests
    • Cross-Browser Testing
    • Frontend Performance Testing
    • Accessibility Testing
  • Exercises
    • BackstopJS
      • Setup
      • Workflow
    • Cypress
      • Setup
      • Workflow
  • Additional Testing Tools
    • Applitools Eyes, an AI-Powered Tool
    • Storybook
  • Perspectives: Visual Testing Challenges
  • Key Takeaways
• 7. Security Testing
  • Building Blocks
    • Common Cyberattacks
      • Web scraping
      • Brute force
      • Social engineering
      • Phishing
      • Cross-site scripting
      • Ransomware
      • Cookie forging
      • Cryptojacking
    • The STRIDE Threat Model
      • Spoofed identity
      • Tampering with inputs
      • Repudiation of actions
      • Information disclosure
      • Denial of service
      • Escalation of privileges
    • Application Vulnerabilities
      • Code or SQL injection
      • Cross-site scripting
      • Unhandled known vulnerabilities
      • Authentication and session mismanagement
      • Unencrypted private data
      • Application misconfigurations
      • Application secrets exposure
    • Threat Modeling
      • Threat modeling steps
      • Threat modeling exercise
      • Security test cases from the threat model
  • Security Testing Strategy
  • Exercises
    • OWASP Dependency-Check
      • Setup and Workflow
    • OWASP ZAP
      • Setup
      • Workflow
        • Manual Explore
        • ZAP Spider
        • Scanning
        • Integrating ZAP with CI
  • Additional Testing Tools
    • Snyk IDE Plug-in
    • Talisman Pre-Commit Hook
    • Chrome DevTools and Postman
  • Perspectives: Security Is a Habit
  • Key Takeaways
• 8. Performance Testing
  • Backend Performance Testing Building Blocks
    • Performance, Sales, and Weekends Off Are Correlated!
    • Simple Performance Goals
    • Factors Affecting Application Performance
    • Key Performance Indicators
    • Types of Performance Tests
    • Types of Load Patterns
    • Performance Testing Steps
      • Step1: Define the target KPIs
      • Step 2: Define the test cases
      • Step 3: Prepare the performance testing environment
      • Step 4: Prepare the test data
      • Step 5: Integrate APM tools
      • Step 6: Script and run the performance tests using tools
  • Exercises
    • Step 1: Define the Target KPIs
    • Step 2: Define the Test Cases
    • Steps 35: Prepare the Data, Environment, and Tools
    • Step 6: Script the Test Cases and Run Them Using JMeter
      • Setup
      • Workflow
      • Designing other performance test cases
      • Data-driven performance testing
      • Integrating into CI
  • Additional Testing Tools
    • Gatling
    • Apache Benchmark
  • Frontend Performance Testing Building Blocks
    • Factors Affecting Frontend Performance
    • RAIL Model
    • Frontend Performance Metrics
  • Exercises
    • WebPageTest
      • Workflow
    • Lighthouse
      • Workflow
  • Additional Testing Tools
    • PageSpeed Insights
    • Chrome DevTools
  • Performance Testing Strategy
  • Key Takeaways
• 9. Accessibility Testing
  • Building Blocks
    • Accessibility User Personas
    • Accessibility Ecosystem
    • Example: Screen Readers
    • WCAG 2.0: Guiding Principles and Levels
    • Level A Conformance Standards
      • Perceivable
      • Operable
      • Understandable
      • Robust
    • Accessibility Enabled Development Frameworks
  • Accessibility Testing Strategy
    • Accessibility Checklist in User Stories
    • Automated Accessibility Auditing Tools
    • Manual Testing
  • Exercises
    • WAVE
      • Workflow
    • Lighthouse
      • Workflow
    • Lighthouse Node Module
      • Workflow
  • Additional Testing Tools
    • Pa11y CI Node Module
    • Axe-core
  • Perspectives: Accessibility as a Culture
  • Key Takeaways
• 10. Cross-Functional Requirements Testing
  • Building Blocks
  • CFR Testing Strategy
    • Functionality
    • Usability
    • Reliability
    • Performance
    • Supportability
  • Other CFR Testing Methods
    • Chaos Engineering
      • Chaos experiment
    • Architecture Testing
    • Infrastructure Testing
    • Compliance Testing
      • General Data Protection Regulation (GDPR)
      • PCI DSS and PSD2
  • Perspectives: Evolvability and the Test of Time!
  • Key Takeaways
• 11. Mobile Testing
  • Building Blocks
    • Introduction to the Mobile Landscape
      • Devices
      • App
      • Network
    • Mobile App Architecture
  • Mobile Testing Strategy
    • Manual Exploratory Testing
    • Functional Automated Testing
    • Data Testing
    • Visual Testing
    • Security Testing
    • Performance Testing
    • Accessibility Testing
      • iOS
      • Android
    • CFR Testing
  • Exercises
    • Appium
      • Prerequisites
      • Android emulator
      • Appium 2.0 setup
      • Workflow
    • Appium Visual Testing Plug-in
      • Setup
      • Workflow
  • Additional Testing Tools
    • Android Studios Database Inspector
    • Performance Testing Tools
      • Monkey
      • Extended controls: Network throttler
      • Appiums performance API
    • Security Testing Tools
      • MobSF
      • Qark
    • Accessibility Scanner
  • Perspectives: The Mobile Test Pyramid
  • Key Takeaways
• 12. Moving Beyond in Testing
  • First Principles in Testing
    • Defect Prevention over Defect Detection
    • Empathetic Testing
    • Micro- and Macro-Level Testing
    • Fast Feedback
    • Continuous Feedback
    • Measuring Quality Metrics
    • Communication and Collaboration Are Key to Quality
  • Soft Skills Aid in Building a Quality-First Mindset
  • Conclusion
• 13. Introduction to Testing in Emerging Technologies
  • Artificial Intelligence and Machine Learning
    • Introduction to Machine Learning
    • Testing ML Applications
  • Blockchain
    • Introduction to Blockchain Concepts
    • Testing Blockchain Applications
  • Internet of Things
    • Introduction to the IoTs Five-Layer Architecture
    • Testing IoT Applications
  • Augmented Reality and Virtual Reality
    • Testing AR/VR Applications
• Index

pokaż cały spis treści

ukryj recenzje