Back to challenges
API TestingAPIIntermediate

Create user API contract and validation

?

Scenario

Your interview prompt

A `POST /users` endpoint creates users in an admin portal. It accepts name, email, role, teamId, locale, and optional invitation message. Only admins can create users, and duplicate emails should be rejected.

List flows, risks, edge cases, data conditions, UX, security, API/backend, and performance concerns.

Tip: a stronger answer usually mixes happy path, negative cases, state changes, data, backend, UX, accessibility, and risk.

How to structure your answer

Happy pathNegative casesData rulesSecurity/API risksUX/performance