API Rules Verification Platform

摘要

A stateful rules verification platform is described. The verification platform implements a specification language to provide a formal definition for rules used to test target systems having a central module that provides APIs (“API provider”) and applications (“API clients”) that use the APIs. Rules may be defined in terms of transitions on state elements associated with interactions between API providers and API clients. The rules defined in accordance with the specification language enable run-time verification in which calls may be intercepted and run-time code to implement checks may automatically be generated and injected to test behaviors of the intercepted calls. The same set of rules may also be employed for static verification during compilation. Additionally, the specification language includes constructs to provide rule descriptions and comments with rules definitions that facilitate publication of the rules and documentation of misbehavior identified during verification.

主权项

1. A verification platform implemented by one or more computing devices comprising:
one or more processing systems; and one or more computer-readable storage media storing instructions executable by the one or more processing systems to implement:
a target system for verification including an application programming interface (API) provider that exposes one or more APIs and one or more API clients that use the APIs;a rules specification language configured to define stateful rules for verification of the target system;one or more stateful rules for verification of the target system defined in accordance with the rules specification language; anda run-time verifier module configured to apply the one or more stateful rules to apply verification checks for interactions between the API provider and the API clients for run-time verification of the target system to verify adherence to the stateful rules prescribed for the target system.