API training

Lesson 1 • Setting Up a Development Environment

Guides learners through installing tools needed to send and inspect API calls. Ensures every student can execute hands-on exercises from chapter two onward.

Lesson 2 • HTTP Protocol Essentials

Covers the request-response cycle, HTTP methods, status codes, and headers. Provides the transport-layer foundation required for all REST and web API work.

Lesson 3 • Data Formats: JSON and XML

Teaches reading and writing JSON and XML payloads used in API requests and responses. Connects data format literacy to practical API consumption.

Lesson 4 • What APIs Are and Why They Matter

Defines APIs as contracts between software components and maps their role in modern applications. Establishes vocabulary used throughout the course.

Lesson 1 • Making Your First API Request

Walks through constructing and sending a GET request to a public API. Anchors abstract HTTP concepts in a concrete, repeatable workflow.

Lesson 2 • Handling API Errors Gracefully

Teaches interpreting error responses and implementing retry and fallback logic. Builds resilience into API-dependent workflows.

Lesson 3 • Reading and Using API Documentation

Develops the skill of navigating reference docs, changelogs, and code samples. Reduces dependency on external help when integrating new APIs.

Lesson 4 • Sending Data with POST, PUT, and PATCH

Covers constructing request bodies to create and update resources. Distinguishes full replacement from partial update semantics.

Lesson 1 • OAuth 2.0 Authorization Flows

Teaches the four OAuth 2.0 grant types and when to apply each. Enables learners to implement delegated authorization in consumer and server apps.

Lesson 2 • API Keys and Basic Authentication

Covers the simplest credential-passing mechanisms and their security trade-offs. Establishes a baseline before introducing token-based approaches.

Lesson 3 • Authentication vs. Authorization Concepts

Distinguishes identity verification from permission enforcement in API contexts. Frames all subsequent auth mechanisms within this conceptual split.

Lesson 4 • Securing API Credentials in Practice

Addresses safe storage, transmission, and rotation of credentials across environments. Prevents common credential-leakage vulnerabilities.

Lesson 1 • Filtering, Sorting, and Pagination Design

Defines patterns for exposing large datasets efficiently through query interfaces. Balances flexibility with server performance.

Lesson 2 • Resource Modeling and URL Design

Teaches identifying resources, naming conventions, and hierarchical URL structures. Lays the structural foundation for a well-designed REST API.

Lesson 3 • Request and Response Schema Design

Covers structuring consistent request bodies and response envelopes. Reduces integration friction for API consumers.

Lesson 4 • API Versioning Strategies

Compares URL path, header, and query-parameter versioning approaches. Enables backward-compatible evolution of a live API.

Lesson 1 • Linting and Validating API Specs

Introduces automated spec validation to catch errors and enforce style rules. Integrates quality checks into the API development workflow.

Lesson 2 • Generating and Publishing API References

Covers rendering interactive documentation from an OpenAPI spec and hosting it. Bridges spec authoring to a consumable developer portal.

Lesson 3 • Documenting Authentication in Specs

Shows how to declare security schemes and apply them to operations in OpenAPI. Ensures auth requirements are visible to consumers and tooling.

Lesson 4 • Writing Schemas with JSON Schema

Teaches defining request and response models using JSON Schema syntax. Enables validation and documentation from a single schema definition.

Lesson 1 • Automated Testing with Collections and Scripts

Teaches building automated test suites using scripting within API client tools. Enables repeatable regression testing without manual execution.

Lesson 2 • Performance and Load Testing APIs

Covers designing load scenarios to measure throughput, latency, and error rates under stress. Identifies bottlenecks before production deployment.

Lesson 3 • Contract Testing Between Services

Introduces consumer-driven contract testing to verify API compatibility between teams. Prevents integration failures caused by uncoordinated changes.

Lesson 4 • Functional API Testing Fundamentals

Covers writing test cases that verify endpoint behaviour against expected inputs and outputs. Establishes the baseline testing layer for all API work.

Lesson 1 • Input Validation and Injection Prevention

Covers validating all incoming data and sanitising inputs to block injection attacks. Directly reduces the attack surface of any API endpoint.

Lesson 2 • Top API Vulnerability Categories

Surveys the most exploited API weaknesses including broken object-level authorization and mass assignment. Builds threat awareness before mitigation techniques.

Lesson 3 • API Security Testing and Auditing

Introduces automated and manual techniques for finding vulnerabilities before attackers do. Integrates security testing into the development lifecycle.

Lesson 4 • Transport Security and Data Protection

Covers enforcing encrypted transport, certificate validation, and sensitive data handling. Ensures data confidentiality end to end.

Lesson 1 • API Gateway Architecture

Covers the role of an API gateway in routing, auth enforcement, and policy application. Positions the gateway as the central control plane for API traffic.

Lesson 2 • GraphQL API Design and Consumption

Teaches schema definition, query writing, and mutation design in GraphQL. Enables learners to build and consume flexible query-driven APIs.

Lesson 3 • API Lifecycle and Governance

Covers managing APIs from design through deprecation within an organisational governance framework. Builds strategic thinking about API portfolio management.

Lesson 4 • Webhooks and Event-Driven Integration

Explains push-based notification patterns and how to build reliable webhook producers and consumers. Extends learners beyond request-response thinking.