Backend for testing purposes.
I'm Alex, a QA Automation Engineer.
I contribute to open-source projects from time to time, but would love to do more.
Steps to reproduce
Teacher created course (id: {{courseIdForMaterials}})
Post {{host}}/api/v1/courses
{
"title": "How to create test cases1 {{coursePostfix}}",
"description": "Basic course about test design technique",
"visible": true,
"categoryId": {{categoryIdForMaterial}}
}Teacher 2 tries to add a material in teacher's course
POST {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials
Request Body
{
"title": "Additional material {{materialPostfix}}",
"data": "stringstri",
"order": 0
}Actual behavior
Expected behavior
Steps to reproduce
Actual behavior
{
"errors": [
{
"msg": "Please send required fields: title",
"param": "title",
"location": "body"
},
{
"msg": "Parameter should be a string",
"param": "title",
"location": "body"
},
{
"msg": "Minimum category length is: 3",
"param": "title",
"location": "body"
},
{
"msg": "Only RU/EN alphabet, space and digits allowed, please change your request",
"param": "title",
"location": "body"
},
{
"msg": "You are not allowed to use spaces only",
"param": "title",
"location": "body"
}
]
}
Expected behavior
{
"errors": [
{
"msg": "Please send required fields: title",
"param": "title",
"location": "body"
}
]
}
Screenshots
Steps to reproduce
admin unban previously banned student/teacher/admin
Actual behavior
string reason: empty
Expected behavior
string reason: = string reason in request body
Steps to reproduce
Actual behavior
500 - internal server error
"errors": "Unable to change course: SequelizeUniqueConstraintError: Validation error"
}
Expected behavior
course title and description should be changed
Screenshots
If applicable, add screenshots to help explain your problem.
*Pre-conditions
There exists authenticated Student role user with valid credentials with existing and not-expired Bearer token "StudentToken".
There exist created visible and hidden courses
Steps to reproduce
Send request:
Method "GET"
Endpoint: with http://qa-school-test.quantori.academy/api/v1/courses
Test response json array for presence of hidden courses
Actual behavior
Response body array contains hidden courses
Expected behavior
User is not supposed to see hidden courses in the list
Screenshots
If applicable, add screenshots to help explain your problem.
Steps to reproduceLog-in as admin, create course, login as teacher, change admin's course with 'patch' method.
Actual behavior 404 Not Found with "errors": "Unable to find course record(s)"
Expected behavior 403 Forbidden
Screenshots
If applicable, add screenshots to help explain your problem.
Pre-conditions
There exists student role user with valid credentials, user is logged in and Bearer Token "Student Token" is generated
There exists Course Category and course with CourseId="1"
User has previously put reaction (like or dislike) to the course
Steps to reproduce
In Postman collection click "Add request"
Name request, e.g. "Repeated reaction"
in Auth Tab choose Bearer Token from droplist, and type in "StudentToken" into text field
In Body tab choose "raw" and "json" from droplists respectively.
Send POST request to http://qa-school-test.quantori.academy/api/v1/courses/1/like/yes (http://qa-school-test.quantori.academy/api/v1/courses/1/like/no respectively)
Actual behavior
Response code 200
Json body :{
"result": "You've liked the course"
}
Expected behavior
Response code 400
Error message: "You have previously liked/disliked the course"
Screenshots
Steps to reproduce
Working in postman execute comands below using admin user credentials.
POST http://qa-school-test.quantori.academy/api/v1/categories
{
"title": " "
}
Actual behavior
Code 200 : New category is created
Expected behavior
Code 400: Error message like: ‘Using only space forbidden’ and the list of valuable parameters.
Screenshots
Description:
When NoAuth user tries to remove a course created by user with teacher role, wrong response code and error message are shown.
Pre-conditions:
Steps to reproduce:
Post-conditions:
Actual behavior:
Expected behavior:
Screenshots
Description:
When admin user tries to remove the course, created by another admin, the course is successfully removed, no error messages are shown.
Pre-conditions:
There is at least two active users with admin role (here admin1 and admin2);
Steps to reproduce:
Post-conditions:
Actual behavior:
Expected behavior:
Screenshots
Steps to reproduce
curl --location --request POST 'http://qa-school-test.quantori.academy/api/v1/categories'
--header 'Authorization: Bearer your token'
--header 'Content-Type: application/json'
--data-raw '{
"title": "Title!@#$%^&*(#)"
}'
Actual behavior
{
"errors": [
{
"value": "Title!",
"msg": "Only RU/EN alphabet and digits allowed, please change your request",
"param": "title",
"location": "body"
}
]
}
Category with the title was not created
Expected behavior
Category with the title was created
I think special symbols should be allowed.
Screenshots
Is your feature request related to a problem? Please describe.
Actual implementation is so, that error message is shown when not allowed characters are used saying: "Only RU/EN alphabet and digits allowed". It seems to me, that category title field could include terms or short phrases, that would need more allowed special characters, so in actual implementation amount of allowed characters seems not to be enough. Besides, spaces are allowed, but not mentioned in error message as allowed characters.
Describe the solution you'd like
I propose allowing for category title field following characters: hyphen, apostrophe, comma, period, colon, slash, & (they seem to may be needed most often), and making error message about allowed characters consistent with changes and actual implementation (spaces are allowed).
Describe alternatives you've considered
The exact number and content of newly allowed characters may vary depending on which terms exactly would be possible to be used in title field (some characters may be deleted from proposed list or added to it).
Description:
When admin user tries to change the course, created by another admin, unexpected code 404 not found and error message ('Unable to find course record(s)') are shown.
Pre-conditions:
There is at least two active users with admin role (here admin1 and admin2);
Steps to reproduce:
Post-conditions:
Actual behavior:
Expected behavior:
Screenshots
Is your feature request related to a problem? Please describe.
Now title of new course must be unique even in different categories. But in future there may be two 'course 1' in categories 'math' and 'biology' due to teachers' preferences. Plus it's more difficult to make testing automation. (I added admin delete category for removing of all courses in the end)
Describe the solution you'd like
Availability of creating cources with the same title BUT in different categories.
Actual behavior
{
"errors": "Unable to change course: SequelizeUniqueConstraintError: Validation error"
}
Expected behavior
{
"errors": [
{
"msg": "Parameter should be boolean",
"param": "visible",
"location": "body"
}
]
}
Screenshots
Pre-conditions
There exists valid teacher role account with valid credentials
There exists category with "categoryId"=1
There exists course with "id"=1 and title "zagolovok"
Steps to reproduce
In Postman create collection, e.g. "Bug report"
Click "Add request"
Name request, e.g. "teacher login"
Type in 'Body':
{
"username": "teacher",
"password": "************"
}
Create teacher Token by typing in 'Tests':
const body = pm.response.json()
pm.environment.set('teacherToken', body.accessToken)
Send POST request to http://qa-school-test.quantori.academy/api/v1/session
Click "Add request"
Name request, e.g. "invalid course description"
Test case1 "499 char":
Type into Body :
{
"id": "1",
"title": "zagolovok1",
"description": "descriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptioriptiodescriptiodes",
“visible”: "true",
“categoryId”: "1"
}
For test case2 "500 char length":
{
"id": "1",
"title": "zagolovok1",
"description": "descriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptioriptiodescriptiodess",
“visible”: "true",
“categoryId”: "1"
}
Send Patch request to http://qa-school-test.quantori.academy/api/v1/courses
Actual result:
Code 500
Error message text:""errors": "Unable to create course: SequelizeDatabaseError: value too long for type character varying(255)""
Expected result:
Code 200
User should be able to change course with description length below 500 characters.
Screenshot:
Is your feature request related to a problem? Please describe.
It is now implemented, that PATCH request for a course if PATCH request values equal initial values, get as a result code 200 Ok and response body in which all the initial values are returned (initial course is created and then being changed by the same teacher user).
Describe the solution you'd like
Please consider adding an error message, saying that no changes have been applied, and changing response code to 400.
Describe alternatives you've considered
Actual implementation seems to be an alternative variant, but I propose, that in some way, user should be informed about whether the values are being changed or not.
Additional context
Teacher created course (course id: {{courseIdForMaterials}})
POST {{host}}/api/v1/courses
Request Body
{
"title": "How to create test cases1 {{coursePostfix}}",
"description": "Basic course about test design technique",
"visible": true,
"categoryId": {{categoryIdForMaterial}}
}
Teacher added a material in this course
POST {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials
{
"title": "Additional material {{materialPostfix}}",
"data": "stringstri",
"order": 5
}
Id the created material was saved in environment {{aterialIdTeacherToDelete}}
Teacher 2 tries to delete by id the teacher's material
DELETE {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials/{{MaterialIdTeacherToDelete}}
Tests:
pm.test("Status code is 403", function () {
pm.response.to.have.status(403);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Check the text error message is correct", function () {
const jsonData = pm.response.json();
pm.expect(jsonData.errors).equal("You're not owner of this course, you can't change/remove it")
});
Actual behavior
Expected behaviour
Screenshots
If applicable, add screenshots to help explain your problem.
Is your feature request related to a problem? Please describe.
In actual implementation categories seem to be managed one at the time only. It may be not convenient for situations when several or many categories would be needed to be managed at the same time (created, deleted, changed).
Describe the solution you'd like
I propose implementing ability for users with admin roles to manage several categories at the same time with the same action (creating, deleting, changing).
Is your feature request related to a problem? Please describe.
Student users can like/dislike courses which are hidden.
Describe the solution you'd like
I think it would be better to forbid these actions for users when courses are not visible for them.
*Pre-conditions
There exists authenticated Student role user with valid credentials with existing and not-expired Bearer token "StudentToken"
There exists hidden course with "id"=1
Steps to reproduce
Send request:
Method "GET"
Endpoint: with http://qa-school-test.quantori.academy/api/v1/courses/1
Test response json for presence of "false" in "visible"
Actual behavior
Course details are displayed and Response body contains "false".
Expected behavior
User is not supposed to see details of hidden course
Screenshots
Is your feature request related to a problem? Please describe.
In actual implementation maximal allowed length for category title is 100 characters. It seems like such long names may look not very nice in categories list, especially if UI would be implemented later with user access to categories list.
Describe the solution you'd like
I propose changing max title length to 60-70 characters, which seems to be enough for most purposes.
Describe alternatives you've considered
Another length may be considered based on actual knowledge of what kind of titles may be used in a system.
Steps to reproduce
Admin added new material in his course (courseId: {{courseIdForMaterialsAdmin}}, title: Additional material {{materialPostfix}}, data: "New test desidn techniques", order: 3;) POST {{host}}/api/v1/courses/{{courseIdForMaterialsAdmin}}/materials
Admin saved in environment title of material as {{NotUniqueTitle}}
Admin tries to add new material with title which are existed
Post {{host}}/api/v1/courses/{{courseIdForMaterialsAdmin}}/materials
Body request:
{
"title": "{{NotUniqueTitle}}",
"data": "New test desidn techniques",
"order": 3
}Tests:
pm.test("Status code is 403", function () {
pm.response.to.have.status(403);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Check the text error of is correct", function () {
const jsonData = pm.response.json();
pm.expect(jsonData.error).equal("Title of material should be unique")
});Actual behaviour
Expected behaviour
Status code is 403
Screenshots
If applicable, add screenshots to help explain your problem.
Description:
When student user tries to remove a course created by user with teacher role, wrong response code and error message are shown.
Pre-conditions:
Steps to reproduce:
Post-conditions:
Actual behavior:
Expected behavior:
Screenshots
Pre-conditions
There exists valid admin role account with valid credentials and generated token
There exists course entitled "teacher1" created by teacher role with "id"=1 in "categoryId"=1
Steps to reproduce
In Postman create collection, e.g. "testing";
Click "Add request";
Name request, e.g. "change course by admin":
Choose "Bearer Token" in Auth tab;
Type in admin token in "Token" text field;
Choose "raw"and "json" in droplists in 'Body' tab;
Type into "Body" text field json request:
{
"id": "1",
"title": "other",
"description": "xxx",
"visible": "true",
"categoryId": "1"
}
Send PATCH request to http://qa-school-test.quantori.academy/api/v1/courses
Actual result:
Code 404
Json response body is:
{
"errors": "Unable to find course record(s)"
}
Expected result:
Code 200
Admin user should be able to make changes in course.
Screenshots
Steps to reproduce
Teacher 2 created course (id: {{createdTeacher2courseIdforChanging}})
Teacher 2 can find this course using id,
Teacher tries to change this course
Patch{{host}}/api/v1/courses
Request Body:
{
"id": {{createdTeacher2courseIdforChanging}},
"title": "New name of course How to create test cases 1656069936 {{coursePostfix}}",
"description": "Basic course about test design technique",
"visible": true,
"categoryId": {{categoryId}}
}
Tests:
pm.test("Status code is 403", function () {
pm.response.to.have.status(403);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Error message is correct", function () {
const body = pm.response.json()
pm.expect(body.errors).to.equal("You're not owner of this course, you can't change/remove it")
});
Actual behavior
Status code: 404 Not Found
{
"errors": "Unable to find course record(s)"
}
Response time is less than 1000
Expected behavior
Status code: 403
Error: You're not owner of this course, you can't change/remove it
Response time is less than 1000
Screenshots
If applicable, add screenshots to help explain your problem.
Steps to reproduce
Actual behavior
There is no info about the reason and who unbanned
POST {{host}}/api/v1/change-user-ban?userId=88&ban=false
body
{
"reason": "just a wish"
}
response body
{
"result": "User successfully unbanned",
"isBanned": false,
"userId": 88,
"reason": "empty",
"createdBy": ""
}
Expected behavior
"reason" string should be filled like in the request body and "created by" string should be filled with admin name
Screenshots
Actual behavior
{
"errors": "Unable to change course: SequelizeUniqueConstraintError: Validation error"
}
Expected behavior
{
"errors": "title should be unique"
}
Screenshots
Description:
When teacher user tries to change a course without 'visible' field in request, course is successfully changed with code 200 and no error message.
Pre-conditions:
Steps to reproduce:
Post-conditions:
Actual behavior:
Expected behavior:
Screenshots
Steps to reproduce
Teacher created course (course id: {{courseIdForMaterials}})
POST {{host}}/api/v1/courses
Request Body
{
"title": "How to create test cases1 {{coursePostfix}}",
"description": "Basic course about test design technique",
"visible": true,
"categoryId": {{categoryIdForMaterial}}
}Teacher added a material in this course
POST {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials
{
"title": "Additional material {{materialPostfix}}",
"data": "stringstri",
"order": 2
}Id the created material was saved in environment {{MaterialIdTeacher}}
Admin tries to change the teacher's material
PATCH {{host}}/api/v1/courses/{{CourseIdForChangingTeacher}}
Request Body
{
"id": {{MaterialIdTeacher}},
"title": "New title {{coursePostfix}}",
"data": "Test Design techniques 12345",
"order": 2
}Tests:
pm.test("Status code is 403", function () {
pm.response.to.have.status(403);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Error message is correct", function () {
const body = pm.response.json()
pm.expect(body.errors).to.equal("You\'re not owner of this material, you can\'t change/remove it")
});Actual behavior
Expected behavior
Steps to reproduce
Teacher added new material in his course (courseId: {{courseIdForMaterials}})
Post {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials
Body Request
{
"title": "QA school{{categoryPostfix}}",
"data": " ",
"order": 2
}
Tests
pm.test("Status code is 400", function () {
pm.response.to.have.status(400);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Check the error message is correct", function () {
const jsonData = pm.response.json();
pm.expect(jsonData.errors[0].msg).equal("You are not allowed to use spaces only")
});
Actual behavior
Pre-conditions
There exists valid teacher role account with valid credentials
There exists category with "categoryId"=1
Steps to reproduce
In Postman create collection, e.g. "Bug report"
Click "Add request"
Name request, e.g. "teacher login"
Type in 'Body':
{
"username": "teacher",
"password": "************"
}
Create teacher Token by typing in 'Tests':
const body = pm.response.json()
pm.environment.set('teacherToken', body.accessToken)
Send POST request to http://qa-school-test.quantori.academy/api/v1/session
Click "Add request"
Name request, e.g. "invalid course description"
Test case1 "499 char":
Type into Body :
{
“title”: “QA course 1",
“description”: "descriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptioriptiodescriptiodes",
“visible”: "true",
“categoryId”: "1"
}
For test case2 "500 char length":
{
“title”: “QA course 1",
“description”: "descriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptiodescriptioriptiodescriptiodess",
“visible”: "true",
“categoryId”: "1"
}
Send Post request to http://qa-school-test.quantori.academy/api/v1/courses
Actual result:
Code 500
Error message text:""errors": "Unable to create course: SequelizeDatabaseError: value too long for type character varying(255)""
Expected result:
Code 200
User should be able to create course with description length below 500 characters.
Screenshot:
Steps to reproduce
Steps to reproduce
Actual behavior
{
"errors": [
{
"msg": "Please send required fields: title",
"param": "title",
"location": "body"
},
{
"msg": "Parameter should be a string",
"param": "title",
"location": "body"
},
{
"msg": "Minimum category length is: 3",
"param": "title",
"location": "body"
},
{
"msg": "Only RU/EN alphabet, space and digits allowed, please change your request",
"param": "title",
"location": "body"
},
{
"msg": "You are not allowed to use spaces only",
"param": "title",
"location": "body"
}
]
}
Expected behavior
{
"errors": "This action is forbidden for role student"
}
Pre-conditions
There exists student role user with valid credentials, user is logged in and Bearer Token "Student Token" is generated
There exists Course Category and course with CourseId="1"
User has not previously put reaction (like or dislike) to the course
Steps to reproduce
In Postman collection click "Add request"
Name request, e.g. "Repeated reaction"
in Auth Tab choose Bearer Token from droplist, and type in "StudentToken" into text field
Send POST request to http://qa-school-test.quantori.academy/api/v1/courses/1/like/remove
Actual behavior
Response code 200
Json body :{
"result": "You've removed your like/dislike from the course"
}
Expected behavior
Response code 400
Error message: "You've not previously left a reaction for this course"
Steps to reproduce
Steps to reproduce
Actual behavior
Error message text states: "errors": "Only RU/EN alphabet and digits allowed, please change your request"
Expected behavior
Error message text should state:"errors": "Only RU/EN alphabet, space and digits allowed, please change your request"
Screenshots
If applicable, add screenshots to help explain your problem.
There is no any error message if we create category with extra field. Category is created but all extras just disappear. I think, the user should know if some of the entered information is not saved
Steps to reproduce
{
"title": "string",
"extra": "string"
}
Actual behavior
New category is created, extra fields and information disappear
Expected behavior
Error message
Screenshots
It should be possible to change fields 1 by 1.
Teacher created course (course id: {{courseIdForMaterials}})
POST {{host}}/api/v1/courses
Request Body
{
"title": "How to create test cases1 {{coursePostfix}}",
"description": "Basic course about test design technique",
"visible": true,
"categoryId": {{categoryIdForMaterial}}
}
Teacher added a material in this course
POST {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials
{
"title": "Additional material {{materialPostfix}}",
"data": "stringstri",
"order": 2
}
Id the created material was saved in environment {{MaterialIdTeacher}}
Teacher 2 tries to change the teacher's material
PATCH {{host}}/api/v1/courses/{{CourseIdForChangingTeacher}}/materials
Request Body
{
"id": {{MaterialIdTeacher}},
"title": "New title {{coursePostfix}}",
"data": "Test Design techniques 12345",
"order": 2
}
Tests:
pm.test("Status code is 403", function () {
pm.response.to.have.status(403);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Error message is correct", function () {
const body = pm.response.json()
pm.expect(body.errors).to.equal("You're not owner of this material, you can't change/remove it")
});
Actual behavior
Expected behaviour
Steps to reproduce
admin created category and course,
teacher can find this course using id,
teacher tries to change the course using it's id
{
"id": {{adm-courseid}},
"title": "st csdg",
"description": " dfvg",
"visible": true,
"categoryId": {{categoryid}}
}
Actual behavior
code: 404
"errors": "Unable to find course record(s)"
}
Expected behavior
code: 403
pm.test("Body matches You're not owner of this course, you can't change/remove it", function () {
pm.expect(pm.response.text()).to.include("You're not owner of this course, you can't change/remove it");
Screenshots
Steps to reproduce
courseId: {{courseIdForMaterials}}, title: Additional material {{materialPostfix}}, data: "data of material. New", order: 3;) POST {{host}}/api/v1/courses/{{courseIdForMaterials}}/materialsTeacher tries to add new material with title which are existed
Post {{host}}/api/v1/courses/{{courseIdForMaterials}}/materials
Body request:
{
"title": "{{NotUniqueTitleTeacher}}",
"data": "data of material. New",
"order": 3
}Tests:
pm.test("Status code is 403", function () {
pm.response.to.have.status(403);
});
pm.test("Response time is less than 1000ms", function () {
pm.expect(pm.response.responseTime).to.be.below(1000);
});
pm.test("Check the text error of is correct", function () {
const jsonData = pm.response.json();
pm.expect(jsonData.error).equal("Title of material should be unique")
});Actual behavior
Expected behavior
Steps to reproduce
Actual behavior
• Status code: 500; Internal server error
• Error message:
{
"errors": "Unable to create category: SequelizeValidationError: notNull Violation: category.createdBy cannot be null"
}
Expected behavior
Expected behavior
• Status code: 200
• {
"id": 0,
"title": "string"
}
Screenshots
If applicable, add screenshots to help explain your problem.
**Pre-conditions"
There exists admin role account with valid credentials. Admin is logged in and bearer token "adminToken" is created and saved to environment.
Steps to reproduce
In Postman create collection, e.g. "Bug report"
Click "Add request"
Name request, e.g. "title with Ru characters"
In Auth tab choose "Bearer Token" from droplist
Add "adminToken" to the textfield
In Body tab choose "Raw" and "Json" from droplists
Type into request Json Body :
{
"title": " ёёёёёёёёёёёёёёёёёёё"
}
Send Post request to http://qa-school-test.quantori.academy/api/v1/categories
Actual behavior
Code 400
Json Response body has following text:
{
"errors": [
{
"value": " ёёёёёёёёёёёёёёёёёёё",
"msg": "Only RU/EN alphabet, space and digits allowed, please change your request",
"param": "title",
"location": "body"
}
]
}
Expected behavior
Response Code 200
Json response body should contain:""title": " ёёёёёёёёёёёёёёёёёёё""
Screenshots
Steps to reproduce
In Postman create collection, e.g. "Bug report"
Click "Add request"
Name request, e.g. "admin login"
Type in Body:
{
"username": "admin",
"password": "************"
}
Create admin Token by typing in Tests: const body = pm.response.json()
pm.environment.set('adminToken', body.accessToken)
Send POST request to http://qa-school-test.quantori.academy/api/v1/session
Click "Add request"
Name request, e.g. "invalid special characters"
Type into Body :
{
"title": ",.;:*@'"
}
Insert Bearer Token "adminToken" into Auth
Insert to Tests:
pm.test("Error text is correct", function () {
const body = pm.response.json()
pm.expect(body.errors[0].msg).to.equal("Only RU/EN alphabet, space and digits allowed, please change your request");
});
Send Post request to http://qa-school-test.quantori.academy/api/v1/categories
Actual behavior
Error message text states: "errors": "Only RU/EN alphabet and digits allowed, please change your request"
Expected behavior
Error message text should state:"errors": "Only RU/EN alphabet, space and digits allowed, please change your request"
Screenshots
If applicable, add screenshots to help explain your problem.
Pre-conditions:
There exists a teacher account with valid credentials
Steps to reproduce:
Login with teacher account
Use the received token for authentication
Send a request:
POST http://qa-school-test.quantori.academy/api/v1/courses
{
"title": "course1238",
"description": "rec",
"visible": true,
"categoryId": 352
}
Actual behavior:
500 Internal Server Error
"Unable to create course: SequelizeValidationError: notNull Violation: course.createdBy cannot be null"
Expected behavior:
The course is created
Steps to reproduce
{
"errors": [
{
"msg": "Please send required fields: title,categoryId",
"param": "title",
"location": "body"
},
{
"msg": "Please send required fields: title,categoryId",
"param": "categoryId",
"location": "body"
},
{
"msg": "Parameter should be a string",
"param": "title",
"location": "body"
},
{
"msg": "Minimum course title length is: 3",
"param": "title",
"location": "body"
},
{
"msg": "You are not allowed to use spaces only",
"param": "title",
"location": "body"
},
{
"msg": "Parameter should be a string",
"param": "description",
"location": "body"
},
{
"msg": "Minimum course description length is: 3",
"param": "description",
"location": "body"
},
{
"msg": "Parameter should be boolean",
"param": "visible",
"location": "body"
},
{
"msg": "Parameter should be numeric",
"param": "categoryId",
"location": "body"
},
{
"msg": "Unable to find category record(s)",
"param": "categoryId",
"location": "body"
}
]
}
Expected behavior
{
"errors": "Unauthorized"
}
Steps to reproduce
Log-in as Admin
Send POST query to
http://qa-school-test.quantori.academy/api/v1/categories
with body
{
"title": 1234
}
Actual behavior
{
"errors": [
{
"value": 1234,
"msg": "Parameter should be a string",
"param": "title",
"location": "body"
},
{
"value": 1234,
"msg": "Only RU/EN alphabet, space and digits allowed, please change your request",
"param": "title",
"location": "body"
},
{
"value": 1234,
"msg": "You are not allowed to use spaces only",
"param": "title",
"location": "body"
}
]
}
Expected behavior
{
"errors": [
{
"value": 1234,
"msg": "Parameter should be a string",
"param": "title",
"location": "body"
}
]
}
Screenshots
Description
It is possible to create category with title consisting of spaces only, allowing such names in categories list seems not to be user friendly, as such names wouldn't look nice in the list.
Steps to reproduce
Actual behavior
Expected behavior
Screenshots
Is your feature request related to a problem? Please describe.
I've noticed that when many users are working at the same time lots of course id and categories id get created and stay. Since the academic program can change with time, some courses can be of short length and not expecting students to get promoted to next education stage , so students would come and leave, and you'd get a flow of new users and not enrolled users. So I assume that manual deleting of category, course, or users can be good when you have manageable number of those, if business expands and grows to lets say 100 000 users and 100 categories and each would have 20-50 courses,, or if education focus changes, admins or authorized users will waste too much time deleting items from category or users lists manually.
Describe the solution you'd like
I'd like chief admin to have possibility to remove all categories and all users sorted by role .
Is your feature request related to a problem? Please describe.
It is now only possible to get the separate category by id or the list of all existing categories, which is not quite comfortable while managing categories by admin user, when there are more than one user in a system with admin role.
Describe the solution you'd like
I propose adding a new endpoint by analogy with courses so it would be possible to manage categories created by the separate admin while being logged in to this admin account:
GET http://qa-school-test.quantori.academy/api/v1/categories/mine
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.