Release date: October 12, 2021
Native Penetration Testing Support
Parasoft SOAtest now supports native penetration testing of API test scenarios. You can efficiently take your existing API functional testing scenarios and create security tests, adding penetration testing into your automated CI process. By leveraging already-existing functional tests for security scenarios, teams can approach security testing earlier, and address critical security defects before they are buried deep in the release.
See Penetration Testing for more details.
You can now perform well-formedness and semantic validation on OpenAPI and Swagger definitions. This helps ensure that your services can be properly consumed by other applications and is an important step toward better API governance.
See Open API and Swagger Validator for additional information.
Custom Test Configurations for the SOAtest and Virtualize Server Web Archive
You can now create custom test configurations in the SOAvirt.war workspace and use them to exercise your tests using different configurations.
As part of this change, the correct test configuration must be specified. The server will no longer substitute the default test configuration if no configuration or the incorrect configuration is specified.
Ability to Register SOAtest and Virtualize Server from the CTP UI
CTP administrators can now connect servers to CTP from the Virtualize Servers screen in CTP.
The native create, read, update, delete (CRUD) tool is now functionally complete. The addition of the Read operation enables you to copy (or extract) values from a data set record and update a record in the data repository.
Streamlined Test Impact Analysis
You can now generate the baseline coverage report by configuring and running a test configuration. See Test Impact Analysis.
Publishing Results from CTP Jobs to DTP
You can now configure your CTP jobs to send results to DTP.
Ability to Generate Parameterized Messages From RESTful Service Definitions
You can now specify a RESTful service definition without recorded traffic to create parameterized clients and responders in the traffic wizard. This allows users to generate parameterized messages based solely on the service definition when recorded traffic is not available. It also allows users to easily update an existing template when a new resource is introduced to a service definition.
- You can now select Empty Groups to enable the traffic wizard to allow message groups defined in a service definition or template file to be created even if the groups do not contain messages from a traffic file.
The format of HTML, PDF, and XML reports produced by desktop installations is now consistent with the reports produced by the WAR deployment, with a more modern look and feel. Note: There are some limitations in the updated reports produced by desktop installations. See Legacy Report Format for more details.
Introduced an option in the WAR deployment to add details to the XML report about the active environment used during test execution.
Introduced an option in the WAR deployment to add details to the XML report about the results of individual assertions run by the JSON Assertor and XML Assertor tools.
Resolved PRs and FRs
|Scroll Table Layout
|Subscribe to CTP jobs to receive an email on job completion.
|CTP server pages loading slowly.
|Jobs get stuck in queue but stopping and starting the server fixes it
|Excel data source files are corrupted after CTP upload.
|Show all assertions used during test in report xml
|Database Tool Returns zero or empty string for null values
|Support for MongoDB 4.0 in the MongoDB Query Tool
|Full support for suppressions in SOAtest desktop
|Update Parasoft Findings for TeamCity to Accept SOAtest Reports from WAR Deployment
|Document which proxy settings (Eclipse or SOAtest) to use for which purpose
|Headless SOAtest Fails to Update Offline from 2020.2 to 2021.1 on Windows
|SOAtest started with IBM java throws error with xlsx excel files
|multipart/form-data table writes text parts using platform default charset
|DB Tool appears to hang for certain SQL queries
|Custom Listeners Display Warnings When Not In Use
|Parameterized traffic wizard use service definition for grouping and Data Repository
|Create data repository from payload ability to name root record type
|Data Repository CRUD Tool Read Operation
|Parasoft search by tool name
|Parasoft search by test suite variable name
|NPE when attempting to get to parameterized traffic wizard from Desktop UI
|MIME Type hal+json Does Not Appear for Responders
|Database data source does not report failure event
|ISO8583 Extension support relative path for Packager Path
|Double byte numbers not handled correctly in data repository column names
|Documentation for HTTPS on SOAVirt WAR file is inaccurate