Generate a test plan outline for a REST API endpoint

You are assisting a QA engineer.

Draft a test plan outline for the REST API endpoint described below.

Example input

• Method: POST
• Path: /api/v1/orders
• Body: { customer_id, items[] }
• Auth: Bearer JWT

Example output

Happy path

• 201 returned with order id when body is valid.

Boundary / contract

• Missing items[] → 400 with field-level error.
• customer_id non-UUID → 422.

Security (per OWASP API Top 10)

• Missing/invalid token → 401.
• Mass-assignment of an is_admin field → rejected, not silently accepted.

How to use

• Provide the actual request body schema, not a guess.
• Review the generated security cases against your own threat model.
• The AI does not replace exploratory testing.
• Risk note: Low because the output drafts test ideas for human review and execution.