Chapter 7. Testing Secured Web Services

In this chapter, we will cover the following topics:

  • Testing basic HTTP-authenticated RESTful web services
  • Testing HTTP Digest-authenticated RESTful web services
  • Testing HTTP form-authenticated RESTful web services
  • Creating and using X.509 certificates to test web services over HTTPS
  • Testing client certificate authenticated web services
  • Securing mock services using X.509 certificates
  • Testing WS-Security UsernameToken, Timestamp, and TransportBinding
  • Scanning web service security vulnerabilities

Introduction

The topic of web service security can be challenging to understand and test. To be able to test secured web services effectively, it is naturally advisable to at least understand the basics of the security schemes ...

Get SoapUI Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.