Path-coverage directed black box API testing

A computer program product comprising a computer readable storage medium having program instructions embodied therewith, the program instructions executable by a computing device to cause the computing device to:

• determine one or more constraints based on one or more inputs and one or more corresponding outputs of an application programming interface in a production environment;
• generate one or more initial test inputs based at least in part on the one or more constraints;
• create a program dependency graph based on trace sequences and request-response data obtained in response to providing the one or more initial test inputs to at least one endpoint of the application programming interface;
• enhance the program dependency graph by generating one or more additional test inputs directed to at least one of a plurality of paths of the dependency graph;
• identify, based on the enhanced program dependency graph, at least a portion of the application programming interface that is not covered by an existing test suite;
• and
• use the enhanced program dependency graph to generate one or more new test cases for the test suite based on the identifying.

A system comprising:

• a memory configured to store program instructions;
• a processor operatively coupled to the memory to execute the program instructions to:
• determine one or more constraints based on one or more inputs and one or more corresponding outputs of an application programming interface in a production environment;
• generate one or more initial test inputs based at least in part on the one or more constraints;
• create a program dependency graph based on trace sequences and request-response data obtained in response to providing the one or more initial test inputs to at least one endpoint of the application programming interface;
• enhance the program dependency graph by generating one or more additional test inputs directed to at least one of a plurality of paths of the dependency graph;
• identify, based on the enhanced program dependency graph, at least a portion of the application programming interface that is not covered by an existing test suite;
• and
• use the enhanced program dependency graph to generate one or more new test cases for the test suite based on the identifying.