Loading…
Loading…
Loading…
POST /api/auth/register enforces:
name: at least 2 charactersemail: valid email format, and not already registered (409 EMAIL_CONFLICT if taken)password: at least 10 characters, containing at least one uppercase letter and at least one digitViolations return 422 VALIDATION_ERROR with an issues array. Success returns 201 with { id, email }.
Your task: design the password test set. There are three independent rules on one field, and the interviewer wants to see whether you test them independently. Then answer: "How would you know if the API silently accepted an invalid password?"
Write your own answer first — the defect report, the case table, the locator, whatever the question asks for. An interviewer grades your reasoning, not your recall.
Practice this live with an AI interviewer
Starts a QA mock interview pre-filled with this problem — you can edit the brief before starting.