{"id":3291,"date":"2020-06-24T10:01:13","date_gmt":"2020-06-24T01:01:13","guid":{"rendered":"\/blog\/?p=3291"},"modified":"2023-09-21T09:26:41","modified_gmt":"2023-09-21T00:26:41","slug":"fortify-ssc-authorization-token-%ec%83%9d%ec%84%b1","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=3291","title":{"rendered":"[Fortify] SSC Authorization Token \uad00\ub9ac"},"content":{"rendered":"\n<p>\ud1a0\ud070\uc740 Fortify API\ub610\ub294 fortifyclinet \uc720\ud2f8\ub9ac\ud2f0\uc5d0\uc11c SSC\uc758 ID\/Password \ub300\uc2e0 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \uc77c\uc885\uc758 \ubb38\uc790\uc5f4 \uc774\uba70, fortifyclient\ub97c \uc0ac\uc6a9\ud574 SSC\ub85c \ubd80\ud130 \ubc1c\uae09\ubc1b\uace0 \uba85\uc2dc\ub41c \uae30\uac04 \ub3d9\uc548\ub9cc \ud55c\uc815\uc801\uc73c\ub85c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p>\ud3ec\ud2f0\ud30c\uc774\uc5d0\uc11c \uac01 \uae30\ub2a5\uc758 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \ud1a0\ud070\uc758 \uc885\ub958 \ubc0f \uad8c\ud55c\uc815\ubcf4\ub294 SSC \ubc11\uc5d0 WEB-INF\/internal\/serviceContext.xml \ud30c\uc77c\uc5d0 \uba85\uc2dc\ub418\uc5b4 \uc788\ub2e4.<\/p>\n\n\n\n<p>\ud1a0\ud070\uc740 \uc0ac\uc6a9\uc790\ubcc4\ub85c \uad8c\ud55c\ubcc4\ub85c \ubaa8\ub450 \ub2e4\ub974\uba70, user\ub97c \uba85\uc2dc\ud558\uc9c0 \uc54a\uc73c\uba74 \uacf5\ud1b5 \ud1a0\ud070\uc774 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070 \ubc1c\uae09 \ubc1b\uae30<\/h2>\n\n\n\n<p>fortifyclient -url http:\/\/\/ssc -user -password &lt;\ud328\uc2a4\uc6cc\ub4dc&gt; token -gettoken -daysToLive &lt;\uc720\ud6a8\uae30\uac04(\uc77c)&gt;<\/p>\n\n\n\n<p>\uc0ac\uc6a9 \uc608)<\/p>\n\n\n\n<p>$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 token -gettoken AnalysisUploadToken -daysToLive 90<\/p>\n\n\n\n<p>Authorization Token: <span class=\"has-inline-color has-vivid-cyan-blue-color\">0cb09f2c-c0a4-4147-8d83-e948cc74e7d4<\/span> \u2190 <strong>\uc774\uac83\uc774 \ubc1c\uae09\ubc1b\uc740 \ud1a0\ud070<\/strong><\/p>\n\n\n\n<p>\uc774 \uba85\ub839\uc740 90\uc77c\uac04 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ubd84\uc11d\uacb0\uacfc \uc5c5\ub85c\ub4dc \uad8c\ud55c\uc744 \uac00\uc9c4 AnalysisUploadToken\uc744 \uc5bb\ub294\ub2e4.<br>\ub514\ud3f4\ud2b8\ub85c \ud1a0\ud070\uc758 \ucd5c\ub300 \uc0ac\uc6a9\uae30\uac04\uc740 90\uc77c \uae4c\uc9c0\ub2e4.<\/p>\n\n\n\n<p>$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc listprojects -authtoken <span class=\"has-inline-color has-vivid-cyan-blue-color\">0cb09f2c-c0a4-4147-8d83-e948cc74e7d4<\/span><\/p>\n\n\n\n<p>ID Name Version<br>4949 TEST_APP 1.0<br>8438 TEST_APP2 2.0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>\u25a3 \ud1a0\ud070 \uc774\ub984<\/strong><\/h3>\n\n\n\n<p>\u2714 AnalysisUploadToken (maxDaysToLive:90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 \uc5ec\ub7ec \uc5c5\ub85c\ub4dc\ub97c \uc704\ud574 Fortify \ud504\ub85c\uc81d\ud2b8 \ubcf4\uace0\uc11c (FPR)\ub97c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc5d0 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc5c5\ub85c\ub4dc\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uc5f0\uad00\ub41c \ubaa8\ub4e0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc744 \ub098\uc5f4\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 AuditToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ubb38\uc81c\ub97c \uac80\ud1a0\ud558\uace0 \uac10\uc0ac \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\uae30 \uc704\ud574 \uc0ac\uc6a9\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 AnalysisDownloadToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 Fortify \ud504\ub85c\uc81d\ud2b8 \ubcf4\uace0\uc11c (FPR)\ub97c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ub2e4\uc6b4\ub85c\ub4dc\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uad00\ub828\ub41c \ubaa8\ub4e0 \uc751\uc6a9 \ud504\ub85c\uadf8\ub7a8 \ubc84\uc804\uc744 \ub098\uc5f4\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\uc5b4\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 AnalysisDownloadToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 Fortify \ud504\ub85c\uc81d\ud2b8 \ubcf4\uace0\uc11c (FPR)\ub97c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ub2e4\uc6b4\ub85c\ub4dc\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uad00\ub828\ub41c \ubaa8\ub4e0 \uc751\uc6a9 \ud504\ub85c\uadf8\ub7a8 \ubc84\uc804\uc744 \ub098\uc5f4\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\uc5b4\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 UploadFileTransferToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc790\ub3d9\ud654 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \/ fileTokens \uc5d4\ub4dc \ud3ec\uc778\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc791\uc131\ud558\uc5ec \uc778\uc99d \ub41c \uc138\uc158 \ub0b4\uc5d0\uc11c \ud30c\uc77c \uc5c5\ub85c\ub4dc\ub97c \uc9c0\uc6d0\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 DownloadFileTransferToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc790\ub3d9\ud654 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \/ fileTokens \uc5d4\ub4dc \ud3ec\uc778\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc791\uc131\ud558\uc5ec \uc778\uc99d \ub41c \uc138\uc158 \ub0b4\uc5d0\uc11c \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc\ub97c \uc9c0\uc6d0\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 ReportFileTransferToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc790\ub3d9\ud654 \ub41c \uc2a4\ud06c\ub9bd\ud2b8\ub294 \/ fileTokens \uc5d4\ub4dc \ud3ec\uc778\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc791\uc131\ud558\uc5ec \uc778\uc99d \ub41c \uc138\uc158 \ub0b4\uc5d0\uc11c \uae30\uc874 \ubcf4\uace0\uc11c \ub2e4\uc6b4\ub85c\ub4dc\ub97c \uc9c0\uc6d0\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 CloudCtrlToken (90)<br>(\ub354 \uc774\uc0c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc74c \u2013 \ub300\uc2e0 ScanCentralCtrlToken\uc744 \uc0ac\uc6a9\ud558\uc2ed\uc2dc\uc624)<\/p>\n\n\n\n<p>\u2714 ScanCentralCtrlToken (90)<br>\uc774 \ud1a0\ud070 \uc0ac\uc591\uc740 Fortify ScanCentral CLI \ub3c4\uad6c\uc640 \ud568\uaed8 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc0ac\uc6a9\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 Fortify ScanCentral \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc2ed\uc2dc\uc624.<\/p>\n\n\n\n<p>\u2714 ScanCentralOneTimeJobToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc774 \ud1a0\ud070\uc740 ScanCentral \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc0dd\uc131\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 CloudOneTimeJobToken (1)<br>(\ub354 \uc774\uc0c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc74c \u2013 ScanCentralOneTimeJobToken\uc73c\ub85c \ub300\uccb4 \ub428)<\/p>\n\n\n\n<p>\u2714 WIESystemToken (90)<br>\ub0b4\ubd80 \ud1a0\ud070 \uc0ac\uc591 \u2013 WIE\uc5d0\uc11c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uac1c\ubcc4 \uc0ac\uc6a9\uc744\uc704\ud55c \uac83\uc774 \uc544\ub2d9\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 WIEUserToken (90)<br>\ub0b4\ubd80 \ud1a0\ud070 \uc0ac\uc591 \u2013 WIE\uc5d0\uc11c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uac1c\ubcc4 \uc0ac\uc6a9\uc744\uc704\ud55c \uac83\uc774 \uc544\ub2d9\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 UnifiedLoginToken (1)<br>\uc774 \ud1a0\ud070 \uc2a4\ud399\uc740 \ub300\ubd80\ubd84\uc758 REST API\uc5d0 \uc561\uc138\uc2a4 \ud560 \uc218\uc788\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \ud558\ub8e8 \ubbf8\ub9cc\uc758 \ub2e8\uae30 \uc790\ub3d9\ud654\uc5d0 \uc801\ud569\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 ReportToken (90)<br>\uc774 \ub2e4\uc6a9\ub3c4 \ud1a0\ud070 \uc0ac\uc591\uc740 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uae30\uc874 \ubcf4\uace0\uc11c\ub97c \uac80\uc0c9\ud558\uace0 \uc0c8 \ubcf4\uace0\uc11c\ub97c \uc0dd\uc131\ud558\uba70 \uae30\uc874 \ubcf4\uace0\uc11c\ub97c \uc0ad\uc81c\ud558\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 PurgeProjectVersionToken (1)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ubaa8\ub4e0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804 \ubaa9\ub85d\uc744 \uc694\uccad\ud558\uace0 SSC\uc5d0\uc11c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc744 \uc81c\uac70\ud558\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 VSTSExtensionToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 Fortify VSTS \ud655\uc7a5\uc5d0\uc11c FPR\uc744 SSC\uc5d0 \uc5c5\ub85c\ub4dc\ud558\uace0 \uc120\ud0dd\uc801\uc73c\ub85c Fortify ScanCentral\uc5d0 \uc2a4\uce94\uc744 \uc81c\ucd9c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p>\u2714 CIToken (365)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \ube4c\ub4dc \ud504\ub85c\uc138\uc2a4\uc758 \uc77c\ubd80\ub85c Software Security Center\uc5d0 FPR\uc744 \uc790\ub3d9\uc73c\ub85c \uc5c5\ub85c\ub4dc\ud558\uace0 \ube4c\ub4dc\uc911\uc778 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc5d0 \ub300\ud55c \ucde8\uc57d\uc131 \ud1b5\uacc4\ub97c \ub2e4\uc6b4\ub85c\ub4dc\ud558\ub294 Fortify \uc5f0\uc18d \ud1b5\ud569 \ud50c\ub7ec\uadf8\uc778\uacfc \ud568\uaed8 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070\uc758 \uc0ac\uc6a9\uae30\uac04 \uc54c\uc544\ub0b4\uae30<\/h2>\n\n\n\n<p>$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 listtokens<\/p>\n\n\n\n<p>ID Owner Creation Date Expire Date Creation I.P.<\/p>\n\n\n\n<p>72381 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72384 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72387 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72390 admin 2016. 10. 19 2016. 10. 20 127.0.0.1<br>72393 admin 2016. 10. 19 2016. 10. 20 127.0.0.1<br>72396 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72399 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72411 admin 2016. 10. 19 2017. 1. 17 10.10.10.47<br>72415 admin 2016. 10. 19 2017. 1. 17 10.10.10.47<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070\uc758 \ucd5c\ub300 \uc0ac\uc6a9\uae30\uac04 \ub298\ub9ac\uae30<\/h2>\n\n\n\n<p>SSC\ud1a0\ud070\uc758 \ub514\ud3f4\ud2b8 \ucd5c\ub300 \uc0ac\uc6a9\uae30\uac04\uc740 90\uc77c\uc744 \ub118\uc9c0 \ubabb\ud55c\ub2e4. \uc774\ub97c \ucd08\uacfc\ud558\uae30 \uc704\ud574\uc11c\ub294 serviceContext.xml\ub97c \uc544\ub798\uc640 \uac19\uc774 \uc218\uc815\ud574 \uc8fc\uc5b4\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>\ud1a0\ud070\uc758 \ucd5c\ub300 \uae30\uac04 \uc124\uc815<\/li><\/ol>\n\n\n\n<p>\/WEB-INF\/internal\/serviceContext.xml<br>\ud30c\uc77c\uc744 \uc5f4\uc5b4\ubcf4\uba74 \uac01 \ud1a0\ud070 \uc885\ub958\ubcc4\ub85c \uc544\ub798\uc640 \uac19\uc740 XML \ucf54\ub4dc\uac00 \uc815\uc758\ub418\uc5b4 \uc788\ub2e4.<br>\uc774 \uc911 maxDaysToLive \ud504\ub85c\ud37c\ud2f0\ub97c \uc218\uc815\ud558\uc5ec \ucd5c\ub300 \ub298\ub9b4 \uc218 \uc788\ub294 \ud1a0\ud070\uc758 \uae30\uac04\uc744 \uc124\uc815\ud55c\ub2e4.<br>\ub514\ud3f4\ud2b8\ub294 90\uc77c\uc774\ub098 36500\uc77c\ub85c \uc218\uc815\ud558\uc5ec \uac70\uc758 \ubb34\uc81c\ud55c\uc73c\ub85c \uc124\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">&lt;bean id=\u201ddownloadToken\u201d class=\u201dcom.fortify.manager.security.ws.AuthenticationTokenSpec\u201d>\n  &lt;property name=\u201dkey\u201d value=\u201dAnalysisDownloadToken\u201d\/>\n  &lt;property name=\u201dmaxDaysToLive\u201d value=\u201d36500\u2033\/>\n  &lt;property name=\u201dactionPermitted\u201d>\n    &lt;list value-type=\u201djava.lang.String\u201d>\n      &lt;value>FPRDownloadRequest&lt;\/value>\n      &lt;value>GetSingleUseFPRDownloadTokenRequest&lt;\/value>\n      &lt;value>ActiveProjectVersionListRequest&lt;\/value>\n      &lt;value>SearchProjectVersionRequest&lt;\/value>\n      &lt;value>ProjectListRequest&lt;\/value>\n    &lt;\/list>\n  &lt;\/property>\n  &lt;property name=\u201dterminalActions\u201d>\n    &lt;list value-type=\u201djava.lang.String\u201d>\n      &lt;value>InvalidateTokenRequest&lt;\/value>\n    &lt;\/list>\n  &lt;\/property>\n&lt;\/bean><\/pre>\n\n\n\n<p>\uc218\uc815 \ud6c4\uc5d0\ub294 SSC\ub97c \uc7ac\uc2dc\uc791\ud574\uc57c \uc801\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\"><li>\uac01 \ud1a0\ud070\ubcc4 \uc0ac\uc6a9\uae30\uac04 \uc7ac\uc124\uc815<\/li><\/ol>\n\n\n\n<p>\uc0ac\uc6a9 \uc608)<\/p>\n\n\n\n<p>admin \uacc4\uc815\uc758 AnalysisDownloadToken\uc758 \uc0ac\uc6a9\uae30\uac04\uc744 15\ub144(5400\uc77c)\uc73c\ub85c \uc870\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<p>$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 token -gettoken AnalysisDownloadToken -user admin -daysToLive 5400<\/p>\n\n\n\n<p>\ubcc0\uacbd\ub41c \uacb0\uacfc\ub294 \uc544\ub798 \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud655\uc778\ud55c\ub2e4.<\/p>\n\n\n\n<p>$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 listtokens -user admin<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070 \uc885\ub958 \ucd94\uac00\ud558\uae30<\/h2>\n\n\n\n<p>\/WEB-INF\/internal\/serviceContext.xml<\/p>\n\n\n\n<p>\ud30c\uc77c\uc758 \uc801\ub2f9\ud55c \ubd80\ubd84\uc5d0 \ud1a0\ud070 bean\uc744 \ucd94\uac00\ud558\uace0 SSC\ub97c \uc7ac\uc2dc\uc791 \ud55c\ub2e4.<\/p>\n\n\n\n<p>NewToken\uc744 \ucd5c\ub300 \uad8c\ud55c\uc73c\ub85c \ucd94\uac00\ud55c \uc608:<\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">        &lt;bean id=\"NewToken\" class=\"com.fortify.manager.security.ws.AuthenticationTokenSpec\">\n            &lt;property name=\"key\" value=\"NewToken\"\/>\n            &lt;property name=\"capabilityDescription\">\n                &lt;value>\n                    &lt;![CDATA[\n                    This multi-use token specification should be used to facilitate authentication to Software\n                    Security Center (SSC) when a user wishes to programmatically review issues and perform audit actions.\n                    ]]>\n                &lt;\/value>\n            &lt;\/property>\n            &lt;property name=\"maxDaysToLive\" value=\"36500\"\/>\n            &lt;property name=\"actionPermitted\">\n                &lt;list value-type=\"java.lang.String\">\n                    &lt;value>(GET|DELETE)=\/api\/v\\d+\/reports\/\\d+&lt;\/value> &lt;!-- get report | delete report -->\n                    &lt;value>(GET|POST)=\/api\/v\\d+\/reports&lt;\/value> &lt;!-- get reports | generate report -->\n                    &lt;value>(GET|PUT|POST|DELETE|HEAD|OPTIONS)=\/api\/.*&lt;\/value>\n                    &lt;value>ActiveProjectVersionListRequest&lt;\/value>\n                    &lt;value>AuditViewRequest&lt;\/value>\n                    &lt;value>BatchCreateUpdateAndAssignCustomTagsRequest&lt;\/value>\n                    &lt;value>BugParamsRequest&lt;\/value>\n                    &lt;value>BugTrackerAssignmentRequest&lt;\/value>\n                    &lt;value>CheckCurrentUserPermissionRequest&lt;\/value>\n                    &lt;value>CloudCtrlUrlRequest&lt;\/value>\n                    &lt;value>CloudOneTimeJobTokenRequest&lt;\/value>\n                    &lt;value>CreateAuditSessionRequest&lt;\/value>\n                    &lt;value>CustomTagListForProjectVersionRequest&lt;\/value>\n                    &lt;value>DeleteSavedReportsRequest&lt;\/value>\n                    &lt;value>DeregisterWIERequest&lt;\/value>\n                    &lt;value>DescriptionAndRecommendationRequest&lt;\/value>\n                    &lt;value>downloadFileTransferURLAccess&lt;\/value>\n                    &lt;value>FileBugRequest&lt;\/value>\n                    &lt;value>FilterSetsAndFoldersUpdateRequest&lt;\/value>\n                    &lt;value>FPRDownloadRequest&lt;\/value>\n                    &lt;value>FPRUploadRequest&lt;\/value>\n                    &lt;value>GenerateReportRequest&lt;\/value>\n                    &lt;value>GET=\/api\/v\\d+\/cloudmappings\/mapByVersion\\w+&lt;\/value>\n                    &lt;value>GET=\/api\/v\\d+\/projectVersions\/\\d+\/artifacts&lt;\/value> &lt;!-- get artifacts in PV -->\n                    &lt;value>GET=\/api\/v\\d+\/projectVersions&lt;\/value> &lt;!-- get project versions -->\n                    &lt;value>GET=\/download\/.*&lt;\/value>\n                    &lt;value>GetDynamicScanDetailsRequest&lt;\/value>\n                    &lt;value>GetDynamicScanSummariesRequest&lt;\/value>\n                    &lt;value>GetFeaturesetsRequest&lt;\/value>\n                    &lt;value>GetProjectVersionIdentifiersRequest&lt;\/value>\n                    &lt;value>GetSingleUseFPRDownloadTokenRequest&lt;\/value>\n                    &lt;value>GetSingleUseFPRUploadTokenRequest&lt;\/value>\n                    &lt;value>GroupingValuesRequest&lt;\/value>\n                    &lt;value>InvalidateAuditSessionRequest&lt;\/value>\n                    &lt;value>IssueListRequest&lt;\/value>\n                    &lt;value>LinkProjectVersionRequest&lt;\/value>\n                    &lt;value>OnParameterChangeRequest&lt;\/value>\n                    &lt;value>PerformAuditActionRequest&lt;\/value>\n                    &lt;value>POST=\/api\/v\\d+\/artifacts\/(action\/purge\/?|\\d+\/action\/?)&lt;\/value> &lt;!-- submit artifact purge action -->\n                    &lt;value>POST=\/api\/v\\d+\/projectVersions\/(action\/purge\/?|\\d+\/action\/?)&lt;\/value> &lt;!-- submit PV purge action -->\n                    &lt;value>POST=\/download\/.*&lt;\/value> &lt;!-- required by flex -->\n                    &lt;value>ProjectListRequest&lt;\/value>\n                    &lt;value>ProjectTemplateDownloadRequest&lt;\/value>\n                    &lt;value>ProjectTemplateListRequest&lt;\/value>\n                    &lt;value>ProjectVersionHasAuditedIssuesRequest&lt;\/value>\n                    &lt;value>ProjectVersionIssueAuditHistoryRequest&lt;\/value>\n                    &lt;value>PurgeProjectVersionRequest&lt;\/value>\n                    &lt;value>RegisterWIERequest&lt;\/value>\n                    &lt;value>reportFileTransferURLAccess&lt;\/value>\n                    &lt;value>SavedReportByIdRequest&lt;\/value>\n                    &lt;value>SavedReportListForProjectVersionRequest&lt;\/value>\n                    &lt;value>SavedReportListRequest&lt;\/value>\n                    &lt;value>SearchProjectVersionRequest&lt;\/value>\n                    &lt;value>SetDynamicScanStatusRequest&lt;\/value>\n                    &lt;value>TestBugTrackerConfigurationRequest&lt;\/value>\n                    &lt;value>TraceNodesRequest&lt;\/value>\n                    &lt;value>UnifiedLoginTokenExtensionRequest&lt;\/value>\n                    &lt;value>uploadFileTransferURLAccess&lt;\/value>\n                    &lt;value>VerifyCloudOneTimeJobTokenRequest&lt;\/value>\n                &lt;\/list>\n            &lt;\/property>\n            &lt;property name=\"terminalActions\">\n                &lt;list value-type=\"java.lang.String\">\n                    &lt;value>InvalidateTokenRequest&lt;\/value>\n                    &lt;value>DELETE=\/api\/v\\d+\/auth\/token&lt;\/value>\n                &lt;\/list>\n            &lt;\/property>\n        &lt;\/bean><\/pre>\n\n\n\n<p>\uc774\ub807\uac8c \ucd94\uac00\ud55c \ud1a0\ud070\ud0a4\ub294 \uc544\ub798\ucc98\ub7fc \uc0ac\uc6a9\ub420 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p>$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 token -gettoken JenkinsToken -daysToLive 3650<\/p>\n\n\n\n<p>Authorization Token: 6c6205ae-1c22-4ea9-858e-cae2e6e3a8ad<\/p>\n\n\n\n<div class=\"wp-block-file\"><a href=\"\/blog\/wp-content\/uploads\/2020\/06\/serviceContext.xml\">serviceContext<\/a><a href=\"\/blog\/wp-content\/uploads\/2020\/06\/serviceContext.xml\" class=\"wp-block-file__button\" download>\ub2e4\uc6b4\ub85c\ub4dc<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ud1a0\ud070\uc740 Fortify API\ub610\ub294 fortifyclinet \uc720\ud2f8\ub9ac\ud2f0\uc5d0\uc11c SSC\uc758 ID\/Password \ub300\uc2e0 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \uc77c\uc885\uc758 \ubb38\uc790\uc5f4 \uc774\uba70, fortifyclient\ub97c \uc0ac\uc6a9\ud574 SSC\ub85c \ubd80\ud130 \ubc1c\uae09\ubc1b\uace0 \uba85\uc2dc\ub41c \uae30\uac04 \ub3d9\uc548\ub9cc \ud55c\uc815\uc801\uc73c\ub85c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4. \ud3ec\ud2f0\ud30c\uc774\uc5d0\uc11c \uac01 \uae30\ub2a5\uc758 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \ud1a0\ud070\uc758 \uc885\ub958 \ubc0f \uad8c\ud55c\uc815\ubcf4\ub294 SSC \ubc11\uc5d0 WEB-INF\/internal\/serviceContext.xml \ud30c\uc77c\uc5d0 \uba85\uc2dc\ub418\uc5b4 \uc788\ub2e4. \ud1a0\ud070\uc740 \uc0ac\uc6a9\uc790\ubcc4\ub85c \uad8c\ud55c\ubcc4\ub85c \ubaa8\ub450 \ub2e4\ub974\uba70, user\ub97c \uba85\uc2dc\ud558\uc9c0 \uc54a\uc73c\uba74 \uacf5\ud1b5 \ud1a0\ud070\uc774 \uc0ac\uc6a9\ub41c\ub2e4. \u25a0 \ud1a0\ud070 \ubc1c\uae09 \ubc1b\uae30 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66],"tags":[],"class_list":["post-3291","post","type-post","status-publish","format-standard","hentry","category-computing_fortify"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3291","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3291"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3291\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3291"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3291"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3291"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}