Top feeds, one place

IT news, summarized.

What happened, why it matters—in one read.

Dev.to · about 8 hours ago · 3m read Development

Your OpenAPI spec is already a test plan — here's how to turn it into Playwright tests automatically

Automate Playwright API tests from OpenAPI/Swagger spec using swagger-to-playwright.vercel.app. The tool generates four tests for each endpoint: happy path, auth check, input validation, and contract validation. Paste generated code into your Playwright project and set baseURL in playwright.config.ts. This does not test business logic or mock API calls.

#playwright#openapi#swagger#automated-testing

Source →

Dev.to · about 8 hours ago · 20m read Development

Teaching My Backend to Lock the Door — FastAPI Auth, Phase 3

The article discusses implementing authentication and authorization in a FastAPI application. The author learned about one-way hashing, signed tokens, and IDOR (Insecure Direct Object Reference) security bugs. The solution involves password hashing, JWT tokens, and scoping access to user data. The author adds libraries like passlib and PyJWT to handle password hashing and token generation.

#fastapi#authentication#authorization#security

Source →