How to test and decrypt the encryption interface

First , We first need to know which interfaces have encryption requirements .

During business testing , Generally, there are many encryption situations involved in the login interface .

Interface test authentication test

How to test this kind of encrypted interface ？

We can analyze it like this ：

First , When the front-end operates functions , Check whether the parameters transmitted from the front end to the interface have been encrypted by the front end .

If it is encrypted by the front end , We can ask front-end personnel , Encryption rules , Directly during interface testing , Pass in the parameters after encryption , Check whether the return result can be obtained correctly .

If it's not the front-end encryption , Then it may be the encryption after the back-end parameters are passed in .

This is the time , What we need to do is to pass in business parameters normally , After calling the interface , After checking the interface request , Whether the data stored in the database is encrypted by the interface , Compare the data encrypted in advance with the database .

Decrypt , In general , We don't test like this , We are more concerned about whether the incoming parameters are correct in the whole data flow .

For example, we will construct the passed in parameters , As long as the normal and abnormal conditions are tested in place in the whole process OK 了 .