Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Bulletin of Network Engineer and Informatics (BUFNETS)
Fathir Kausar
Politeknik Negeri Lampung
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Feature-Level Testing of a Multi-Tenant REST API for an MSME E-Commerce Platform: A Laravel Case Study Tri Sandhika Jaya; Rima Maulini; Dwirgo Sahlinal; Fathir Kausar; Muhammad Putara Meca Abzanro
Bulletin of Network Engineer and Informatics Vol. 4 No. 2 (2026): BUFNETS (Bulletin of Network Engineer and Informatics) October 2026
Publisher : PT. GWEX NET PUBLISHER

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.59688/8c4a2177

Abstract

MSME e-commerce applications rely on REST APIs as the contract between back-end systems and mobile clients; the two most damaging defect classes at this layer are cross-tenant data leakage (broken object-level authorization, BOLA) and violations of business rules guarding financial integrity. This case study evaluates in-framework feature testing of the REST API of a Laravel 13 MSME e-commerce ERP platform exposing 57 API operations secured with Sanctum token authentication and role-based access control. The method is a four-concern test design (nominal, validation, authentication-authorization, business rules) executed by PHPUnit against an in-memory SQLite database, measured through operation coverage and assertion classification. The results show that 85 test cases with 229 assertions achieve 100% operation coverage (57/57) at a median execution time of 4.3 seconds; 37 of 102 status assertions (36.3%) are refusal assertions that anchor cross-tenant isolation at 404, mass-assignment rejection, post-logout token revocation, refusal of illegal state transitions, and stock-restoration idempotency under sequential duplicate rejection. The measurement process also uncovered and corrected a defect in static coverage extraction. The study concludes that such a suite constitutes low-cost, domain-specific regression oracles rather than evidence of absence of defects; mutation testing and a comparison with automated testing tools remain future work.
Co-Authors Dwirgo Sahlinal Muhammad Putara Meca Abzanro Rima Maulini Tri Sandhika Jaya