Our teams use Postman to explorative testing of API. However, for protected endpoints we need to:
- Authenticate and retrieve session tokens: SESSION and XSRF (we have the endpoint returning both as JSON).
- Add SESSION cookie and XSRF header to every request.
This is laborious. Is there a way to simplify that process with Postman?
Can Postman parse tokens out of the endpoint and add them to every HTTP request? How?