A simple but widely used approach to authentication is to use a login form to prevent access unless valid credentials are entered. After successful authentication, HTTP session management is used to enable the authentication of subsequent requests. In this recipe, we will see how SoapUI can access a form-authenticated RESTful web service.
Similar to the previous two recipes, Tomcat will be used to provide the HTTP form authentication, and the helloworld-webapp Jersey sample will again be used to test against. So please follow the Getting ready advice there if you need more details. The Tomcat HTTP Basic or Digest authentication configuration can also be reused and tweaked in this recipe.
The RESTDBMock-soapui-project.xml project that includes the FormBasedAuthTestCase test case for this recipe can be found in the chapter 7 samples.