Buggy API
The Buggy API is a small public Shopping Cart practice API mounted at /shop.
It is deliberately buggy by default, so it is useful for practising exploratory API testing, auth checks, business-rule testing, and checkout validation.
Main Workflow
- Create a cart with
POST /shop/register. - Copy the returned
token. - View catalogue products with
GET /shop/products. - Add items with
POST /shop/carts/{cartId}/itemsusingAuthorization: Bearer {token}. - Review a cart with
GET /shop/carts/{cartId}. - Checkout with
POST /shop/checkout/{cartId}using the same bearer token.
Domain Rules
- Anyone can view products.
- Only the cart owner token should allow cart mutation or checkout.
- Product catalogue data is read-only.
- Product stock is maintained automatically so at least 10 products have stock greater than zero.
- Stock maintenance never deletes products.
- Old carts are pruned so only 100 carts remain in memory.