The 16-Module Postman Syllabus

The syllabus mirrors how companies expect you to explain API testing—not just click Send in Postman.

Module 1: API Testing Fundamentals

Topics:

  • What is an API?
  • Why API Testing is Required (Before UI)
  • Types of APIs
  • REST
  • SOAP (Basics)
  • API vs Web Services
  • Client–Server Architecture
  • Statelessness
  • REST Principles & Constraints
  • HTTP vs HTTPS

Interview Focus

Advertisement

Why API testing is faster and more reliable than UI testing.

Module 2: HTTP Protocol (Core Foundation)

Topics:

  • Request Structure
  • Response Structure
  • HTTP Methods
    • GET
    • POST
    • PUT
    • PATCH
    • DELETE
  • HTTP Status Codes
    • 1xx–5xx
    • 200
    • 201
    • 204
    • 400
    • 401
    • 403
    • 404
    • 409
    • 422
    • 500
    • 502
    • 503
  • Idempotent vs Non-Idempotent

Interview Focus

PUT vs PATCH.

Module 3: Postman Tool – Complete Basics

Topics:

  • What is Postman?
  • Installing Postman
  • Postman UI
  • Workspace
  • Collection
  • Folder
  • Request
  • Import Collections
  • Export Collections
  • History Tab
  • Organizing APIs

Module 4: Request Creation in Postman

Topics:

  • Query Parameters
  • Path Parameters
  • Request Headers
  • Request Body Types
    • Raw JSON
    • XML
    • Form-Data
    • x-www-form-urlencoded
  • Sending Requests
  • Analyzing Responses

Module 5: API Authentication & Authorization

Topics:

  • Authentication vs Authorization
  • No Auth
  • Basic Authentication
  • Bearer Token
  • API Key
  • OAuth 2.0
  • Token-Based Authentication
  • JWT Basics
  • Dynamic Token Handling

Interview Focus

Handling token expiration in Postman.

Module 6: Validations Using Postman Tests

Topics:

  • Tests Tab
  • JavaScript Basics for Postman
  • pm.response.to.have.status(200)
  • pm.expect(jsonData.id).to.eql(101)

Module 7: Environment & Variables

Topics:

  • Variables
  • Environment Variables
  • Global Variables
  • Collection Variables
  • Local Variables
  • Creating Environments
  • Variables in URL
  • Variables in Headers
  • Variables in Request Body
  • Dynamic Variables from Responses

Module 8: Chaining APIs (Real-Time)

Topics:

  • API Chaining
  • pm.environment.set()
  • Passing Values Between Requests

Interview Focus

Explain API chaining using a real-time example.

Module 9: Advanced Validations

Topics:

  • Schema Validation
  • Nested JSON
  • Arrays
  • Conditional Checks

Module 10: Negative & Edge Case Testing

Topics:

  • Invalid Payloads
  • Missing Fields
  • Invalid Tokens
  • Invalid IDs
  • Boundary Values
  • Security Payloads

Module 11: Data-Driven Testing in Postman

Topics:

  • Collection Runner
  • CSV Data
  • JSON Data

Module 12: Collection Runner

Topics:

  • Select Environment
  • Run Collection
  • Multiple Iterations
  • Debugging

Module 13: Newman (Postman CLI)

Topics:

  • Newman Overview
  • Installation
  • Execute Collections
  • HTML Reports

Module 14: Mock Servers in Postman

Topics:

  • Mock Servers
  • Create Mock APIs
  • Backend Not Ready Scenarios

Module 15: API Documentation & Swagger

Topics:

  • Swagger
  • OpenAPI
  • Import Swagger into Postman
  • Contract Validation

Module 16: Real-Time Project API Framework (Postman)

Topics:

  • Environment Setup
  • Workspace Organization
  • Collection Organization
  • Maintainable Project Structure

Module 17: Interview Preparation (Bonus)

Topics:

Your Note

"Postman is not just a tool — companies expect you to explain API testing using real-time project scenarios, validations, chaining, and framework."

The RESTful Booker Company-Style Project

Your complete end-to-end practical project uses:

RESTful Booker

https://restful-booker.herokuapp.com

This project is widely used in companies and interviews because it includes:

  • Authentication
  • CRUD Operations
  • Public APIs
  • Secured APIs
  • API Chaining
  • Negative Testing
  • Edge Cases

Company-Style Structure

Postman Workspace

Booking_Management_API_Project

Collection Folders

  • Auth
  • Booking
  • Negative_Scenarios
  • Regression
  • Smoke

Environments

  • DEV
  • QA

Project Flow

The 16 project modules cover:

  • API Understanding
  • Authentication
  • Create Booking (POST)
  • Get Booking (GET)
  • Update Booking (PUT)
  • Partial Update (PATCH)
  • Delete Booking
  • API Chaining
  • Variables & Environments
  • Assertions
  • Negative Testing
  • Security Testing
  • Data-Driven Testing
  • Collection Runner
  • Newman
  • Reporting
  • Interview Explanation

Your Note

"If you practice this ONE demo completely, you don't need any other API project."

The 5 Demo APIs and Practice Order

Practice the following APIs in order.

1. RESTful Booker

restful-booker.herokuapp.com

Practice:

  • Authentication
  • CRUD
  • API Chaining
  • Validations

2. ReqRes

reqres.in

Practice:

  • User APIs
  • Pagination
  • Data-Driven Testing

3. Fake Store API

fakestoreapi.com

Practice:

  • Product APIs
  • Cart APIs
  • Order Flow

4. Swagger Petstore

petstore.swagger.io/v2

Practice:

  • Swagger
  • Contract Testing

5. GoRest

gorest.co.in/public/v2

Practice:

  • Token Authentication
  • Role-Based Testing

Your Note

"If you practice all these demo APIs, you can confidently say — 'I have done real-time API testing on multiple projects.'"

How the Deep-Dive Articles Are Organized

This roadmap serves as the central hub for the practical series.

Cluster 2

Postman Setup, API Understanding & HTTP Methods

Cluster 3

Authentication, Token & Variables/Environments

Cluster 4

Assertions, Validations & the Postman Tests Tab

Cluster 5

API Chaining, Negative/Security & Data-Driven Testing

Cluster 6

Collection Runner, Newman/CI-CD, Mock Servers, Contract Testing & Interview Preparation

For concept explanations, link to your existing API Testing Q&A pillars.

Also cross-reference the equivalent REST Assured Practical articles for automation-based implementation.

FAQs

How Is This Roadmap Structured?

The roadmap combines:

  • A 16-Module Postman Syllabus
  • A Company-Style RESTful Booker Project
  • Five Demo APIs

covering API testing from beginner to senior level.

Where Should a Beginner Start?

Start with:

Then continue with the RESTful Booker project's API Understanding and Authentication modules.

Which Demo API Is Best to Start With?

Begin with:

RESTful Booker

because it combines:

  • Authentication
  • CRUD
  • API Chaining
  • Negative Testing

in a single project.

Practice in the following order:

  1. RESTful Booker
  2. ReqRes
  3. Fake Store API
  4. Swagger Petstore
  5. GoRest

This progression simulates real project maturity.

Is Postman Enough, or Should You Learn REST Assured?

The roadmap includes:

Postman covers manual and exploratory API testing, while the REST Assured practical roadmap serves as the next step for automation.