Entwicklung und Evaluierung eines Testkonzeptes für die Schnittstellen einer Plattform für den digitalen Austausch von Transportinformationen

This master thesis is about the development and implementation of a test concept for the API of an eFTI platform ("eFTI" is the abbreviation for electronic Freight Transport In formation). EFTI is a regulation for the digitization of the transport infrastructure. It describes an architecture that consists of several components. One of the main components are the eFTI platforms, which are operated by the respective company. The transport information is stored only in the platform and can exclusively be retrieved through it. Fraunhofer IML is working on a reference implementation of an eFTI platform, which was used in this project for the application of the test concept. For the test concept, a general concept was first created based on various literature sources, which was then adapted to the use case of the eFTI platform. In summary, it specifies that all endpoints of the API of the eFTI platform are to be tested. Functional tests, load tests, and security tests are to be developed. For each of these test types, further details and specifications are described in the concept. In addition, the execution of the functional tests is to be automated using a CI/CD pipeline. For the subsequent implementation, the given implementation of the eFTI platform first had to be adapted according to the specifications of the eFTI documentation from the EU Commission in order to be able to offer the specified endpoints. The tests described by the concept were implemented using Postman. Also, a new job was added to the already existing Gitlab CI/CD pipeline, which executes the functional tests and provides the test reports as job artifacts. After the execution of the tests, the results were analyzed. The result of this was that the functional tests were successful with one exception, where appropriate logic is miss ing in the code. The load tests were also performed without any problems, but the results are not very meaningful, since the API was only executed locally and not in the inten ded environment, and the load tests are limited by Postman. Only a few minor areas for improvement stood out in the security tests. Overall, the API passed the test with minor flaws.