route-testerlisted

# API Route Testing Skill This skill provides framework-agnostic guidance for testing HTTP API routes and endpoints across any backend framework (Express, Next.js API Routes, FastAPI, Django REST, Flask, etc.). ## Core Testing Principles ### 1. Test Types for API Routes **Unit Tests** - Test individual route handlers in isolation - Mock dependencies (database, external APIs) - Fast execution (< 50ms per test) - Focus on business logic **Integration Tests** - Test full request/response cycle - Real database (test instance) - Authentication flow included - Slower but more comprehensive **End-to-End Tests** - Test from client perspective - Full authentication flow - Real services (or close replicas) - Most realistic, slowest execution ### 2. Authentication Testing Patterns #### JWT Cookie Authentication ```typescript // Common pattern across frameworks describe('Protected Route Tests', () => { let authCookie: string; beforeEach(async () => { // Login and get JWT cookie const loginResponse = await request(app) .post('/api/auth/login') .send({ email: 'test@example.com', password: 'password123' }); authCookie = loginResponse.headers['set-cookie'][0]; }); it('should access protected route with valid cookie', async () => { const response = await request(app) .get('/api/protected/resource') .set('Cookie', authCookie); expect(response.status).toBe(200); }); it('should reject access without cookie', async () => { c