Testing basic HTTP-authenticated RESTful web services

A good place to start with security testing is HTTP Basic authentication. As far as authentication approaches go, it is very simple and widely used for both RESTful and SOAP web services. In this recipe, we'll see how to set up and test a REST resource that requires HTTP Basic authentication. If you've not seen HTTP Basic authentication before, you can, of course, read up on it first, although this should not be necessary in order to follow this recipe, and we will look at how it works shortly.

Getting ready

Most of the actual legwork in this recipe involves setting up the test service. You can always skip these parts and use any other available web service that requires HTTP Basic authentication ...

Get SoapUI Cookbook now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.