{"id":3291,"date":"2020-06-24T10:01:13","date_gmt":"2020-06-24T01:01:13","guid":{"rendered":"\/blog\/?p=3291"},"modified":"2023-09-21T09:26:41","modified_gmt":"2023-09-21T00:26:41","slug":"fortify-ssc-authorization-token-%ec%83%9d%ec%84%b1","status":"publish","type":"post","link":"https:\/\/hasu0707.duckdns.org\/blog\/?p=3291","title":{"rendered":"[Fortify] SSC Authorization Token \uad00\ub9ac"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\ud1a0\ud070\uc740 Fortify API\ub610\ub294 fortifyclinet \uc720\ud2f8\ub9ac\ud2f0\uc5d0\uc11c SSC\uc758 ID\/Password \ub300\uc2e0 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \uc77c\uc885\uc758 \ubb38\uc790\uc5f4 \uc774\uba70, fortifyclient\ub97c \uc0ac\uc6a9\ud574 SSC\ub85c \ubd80\ud130 \ubc1c\uae09\ubc1b\uace0 \uba85\uc2dc\ub41c \uae30\uac04 \ub3d9\uc548\ub9cc \ud55c\uc815\uc801\uc73c\ub85c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud3ec\ud2f0\ud30c\uc774\uc5d0\uc11c \uac01 \uae30\ub2a5\uc758 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \ud1a0\ud070\uc758 \uc885\ub958 \ubc0f \uad8c\ud55c\uc815\ubcf4\ub294 SSC \ubc11\uc5d0 WEB-INF\/internal\/serviceContext.xml \ud30c\uc77c\uc5d0 \uba85\uc2dc\ub418\uc5b4 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud1a0\ud070\uc740 \uc0ac\uc6a9\uc790\ubcc4\ub85c \uad8c\ud55c\ubcc4\ub85c \ubaa8\ub450 \ub2e4\ub974\uba70, user\ub97c \uba85\uc2dc\ud558\uc9c0 \uc54a\uc73c\uba74 \uacf5\ud1b5 \ud1a0\ud070\uc774 \uc0ac\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070 \ubc1c\uae09 \ubc1b\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">fortifyclient -url http:\/\/\/ssc -user -password &lt;\ud328\uc2a4\uc6cc\ub4dc&gt; token -gettoken -daysToLive &lt;\uc720\ud6a8\uae30\uac04(\uc77c)&gt;<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9 \uc608)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 token -gettoken AnalysisUploadToken -daysToLive 90<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Authorization Token: <span class=\"has-inline-color has-vivid-cyan-blue-color\">0cb09f2c-c0a4-4147-8d83-e948cc74e7d4<\/span> \u2190 <strong>\uc774\uac83\uc774 \ubc1c\uae09\ubc1b\uc740 \ud1a0\ud070<\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774 \uba85\ub839\uc740 90\uc77c\uac04 \uc0ac\uc6a9\ud560 \uc218 \uc788\ub294 \ubd84\uc11d\uacb0\uacfc \uc5c5\ub85c\ub4dc \uad8c\ud55c\uc744 \uac00\uc9c4 AnalysisUploadToken\uc744 \uc5bb\ub294\ub2e4.<br>\ub514\ud3f4\ud2b8\ub85c \ud1a0\ud070\uc758 \ucd5c\ub300 \uc0ac\uc6a9\uae30\uac04\uc740 90\uc77c \uae4c\uc9c0\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc listprojects -authtoken <span class=\"has-inline-color has-vivid-cyan-blue-color\">0cb09f2c-c0a4-4147-8d83-e948cc74e7d4<\/span><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ID Name Version<br>4949 TEST_APP 1.0<br>8438 TEST_APP2 2.0<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>\u25a3 \ud1a0\ud070 \uc774\ub984<\/strong><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 AnalysisUploadToken (maxDaysToLive:90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 \uc5ec\ub7ec \uc5c5\ub85c\ub4dc\ub97c \uc704\ud574 Fortify \ud504\ub85c\uc81d\ud2b8 \ubcf4\uace0\uc11c (FPR)\ub97c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc5d0 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc5c5\ub85c\ub4dc\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uc5f0\uad00\ub41c \ubaa8\ub4e0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc744 \ub098\uc5f4\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 AuditToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ubb38\uc81c\ub97c \uac80\ud1a0\ud558\uace0 \uac10\uc0ac \uc791\uc5c5\uc744 \uc218\ud589\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\uae30 \uc704\ud574 \uc0ac\uc6a9\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 AnalysisDownloadToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 Fortify \ud504\ub85c\uc81d\ud2b8 \ubcf4\uace0\uc11c (FPR)\ub97c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ub2e4\uc6b4\ub85c\ub4dc\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uad00\ub828\ub41c \ubaa8\ub4e0 \uc751\uc6a9 \ud504\ub85c\uadf8\ub7a8 \ubc84\uc804\uc744 \ub098\uc5f4\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\uc5b4\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 AnalysisDownloadToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \uc0ac\uc6a9\uc790\uac00 Fortify \ud504\ub85c\uc81d\ud2b8 \ubcf4\uace0\uc11c (FPR)\ub97c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ub2e4\uc6b4\ub85c\ub4dc\ud558\uace0 \uc0ac\uc6a9\uc790\uc640 \uad00\ub828\ub41c \ubaa8\ub4e0 \uc751\uc6a9 \ud504\ub85c\uadf8\ub7a8 \ubc84\uc804\uc744 \ub098\uc5f4\ud558\ub824\ub294 \uacbd\uc6b0 SSC(Software Security Center)\uc5d0 \ub300\ud55c \uc778\uc99d\uc744 \uc6a9\uc774\ud558\uac8c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub418\uc5b4\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 UploadFileTransferToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc790\ub3d9\ud654 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \/ fileTokens \uc5d4\ub4dc \ud3ec\uc778\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc791\uc131\ud558\uc5ec \uc778\uc99d \ub41c \uc138\uc158 \ub0b4\uc5d0\uc11c \ud30c\uc77c \uc5c5\ub85c\ub4dc\ub97c \uc9c0\uc6d0\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 DownloadFileTransferToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc790\ub3d9\ud654 \uc2a4\ud06c\ub9bd\ud2b8\ub294 \/ fileTokens \uc5d4\ub4dc \ud3ec\uc778\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc791\uc131\ud558\uc5ec \uc778\uc99d \ub41c \uc138\uc158 \ub0b4\uc5d0\uc11c \ud30c\uc77c \ub2e4\uc6b4\ub85c\ub4dc\ub97c \uc9c0\uc6d0\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 ReportFileTransferToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc790\ub3d9\ud654 \ub41c \uc2a4\ud06c\ub9bd\ud2b8\ub294 \/ fileTokens \uc5d4\ub4dc \ud3ec\uc778\ud2b8\ub97c \uc0ac\uc6a9\ud558\uc5ec \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc791\uc131\ud558\uc5ec \uc778\uc99d \ub41c \uc138\uc158 \ub0b4\uc5d0\uc11c \uae30\uc874 \ubcf4\uace0\uc11c \ub2e4\uc6b4\ub85c\ub4dc\ub97c \uc9c0\uc6d0\ud574\uc57c\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 CloudCtrlToken (90)<br>(\ub354 \uc774\uc0c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc74c \u2013 \ub300\uc2e0 ScanCentralCtrlToken\uc744 \uc0ac\uc6a9\ud558\uc2ed\uc2dc\uc624)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 ScanCentralCtrlToken (90)<br>\uc774 \ud1a0\ud070 \uc0ac\uc591\uc740 Fortify ScanCentral CLI \ub3c4\uad6c\uc640 \ud568\uaed8 \uc0ac\uc6a9\ub429\ub2c8\ub2e4. \uc0ac\uc6a9\uc5d0 \ub300\ud55c \uc790\uc138\ud55c \ub0b4\uc6a9\uc740 Fortify ScanCentral \uc124\uba85\uc11c\ub97c \ucc38\uc870\ud558\uc2ed\uc2dc\uc624.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 ScanCentralOneTimeJobToken (1)<br>\uc77c\ubc18\uc801\uc73c\ub85c \uc218\ub3d9\uc73c\ub85c \uc0dd\uc131\ub418\uc9c0 \uc54a\ub294 \uc77c\ud68c\uc6a9 \ud1a0\ud070 \uc0ac\uc591. \uc774 \ud1a0\ud070\uc740 ScanCentral \ud074\ub77c\uc774\uc5b8\ud2b8\uc5d0\uc11c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc0dd\uc131\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 CloudOneTimeJobToken (1)<br>(\ub354 \uc774\uc0c1 \uc0ac\uc6a9\ub418\uc9c0 \uc54a\uc74c \u2013 ScanCentralOneTimeJobToken\uc73c\ub85c \ub300\uccb4 \ub428)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 WIESystemToken (90)<br>\ub0b4\ubd80 \ud1a0\ud070 \uc0ac\uc591 \u2013 WIE\uc5d0\uc11c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uac1c\ubcc4 \uc0ac\uc6a9\uc744\uc704\ud55c \uac83\uc774 \uc544\ub2d9\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 WIEUserToken (90)<br>\ub0b4\ubd80 \ud1a0\ud070 \uc0ac\uc591 \u2013 WIE\uc5d0\uc11c \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uc0dd\uc131\ud569\ub2c8\ub2e4. \uac1c\ubcc4 \uc0ac\uc6a9\uc744\uc704\ud55c \uac83\uc774 \uc544\ub2d9\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 UnifiedLoginToken (1)<br>\uc774 \ud1a0\ud070 \uc2a4\ud399\uc740 \ub300\ubd80\ubd84\uc758 REST API\uc5d0 \uc561\uc138\uc2a4 \ud560 \uc218\uc788\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4. \ud558\ub8e8 \ubbf8\ub9cc\uc758 \ub2e8\uae30 \uc790\ub3d9\ud654\uc5d0 \uc801\ud569\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 ReportToken (90)<br>\uc774 \ub2e4\uc6a9\ub3c4 \ud1a0\ud070 \uc0ac\uc591\uc740 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \uae30\uc874 \ubcf4\uace0\uc11c\ub97c \uac80\uc0c9\ud558\uace0 \uc0c8 \ubcf4\uace0\uc11c\ub97c \uc0dd\uc131\ud558\uba70 \uae30\uc874 \ubcf4\uace0\uc11c\ub97c \uc0ad\uc81c\ud558\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 PurgeProjectVersionToken (1)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \ud504\ub85c\uadf8\ub798\ubc0d \ubc29\uc2dd\uc73c\ub85c \ubaa8\ub4e0 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804 \ubaa9\ub85d\uc744 \uc694\uccad\ud558\uace0 SSC\uc5d0\uc11c \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc744 \uc81c\uac70\ud558\ub294 \uae30\ub2a5\uc744 \uc81c\uacf5\ud569\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 VSTSExtensionToken (90)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 Fortify VSTS \ud655\uc7a5\uc5d0\uc11c FPR\uc744 SSC\uc5d0 \uc5c5\ub85c\ub4dc\ud558\uace0 \uc120\ud0dd\uc801\uc73c\ub85c Fortify ScanCentral\uc5d0 \uc2a4\uce94\uc744 \uc81c\ucd9c\ud558\ub294 \ub370 \uc0ac\uc6a9\ub429\ub2c8\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u2714 CIToken (365)<br>\uc774 \ub2e4\uc911 \uc0ac\uc6a9 \ud1a0\ud070 \uc0ac\uc591\uc740 \ube4c\ub4dc \ud504\ub85c\uc138\uc2a4\uc758 \uc77c\ubd80\ub85c Software Security Center\uc5d0 FPR\uc744 \uc790\ub3d9\uc73c\ub85c \uc5c5\ub85c\ub4dc\ud558\uace0 \ube4c\ub4dc\uc911\uc778 \uc560\ud50c\ub9ac\ucf00\uc774\uc158 \ubc84\uc804\uc5d0 \ub300\ud55c \ucde8\uc57d\uc131 \ud1b5\uacc4\ub97c \ub2e4\uc6b4\ub85c\ub4dc\ud558\ub294 Fortify \uc5f0\uc18d \ud1b5\ud569 \ud50c\ub7ec\uadf8\uc778\uacfc \ud568\uaed8 \uc0ac\uc6a9\ud558\ub3c4\ub85d \uc124\uacc4\ub418\uc5c8\uc2b5\ub2c8\ub2e4.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070\uc758 \uc0ac\uc6a9\uae30\uac04 \uc54c\uc544\ub0b4\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 listtokens<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">ID Owner Creation Date Expire Date Creation I.P.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">72381 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72384 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72387 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72390 admin 2016. 10. 19 2016. 10. 20 127.0.0.1<br>72393 admin 2016. 10. 19 2016. 10. 20 127.0.0.1<br>72396 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72399 admin 2016. 10. 19 2017. 1. 17 127.0.0.1<br>72411 admin 2016. 10. 19 2017. 1. 17 10.10.10.47<br>72415 admin 2016. 10. 19 2017. 1. 17 10.10.10.47<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070\uc758 \ucd5c\ub300 \uc0ac\uc6a9\uae30\uac04 \ub298\ub9ac\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">SSC\ud1a0\ud070\uc758 \ub514\ud3f4\ud2b8 \ucd5c\ub300 \uc0ac\uc6a9\uae30\uac04\uc740 90\uc77c\uc744 \ub118\uc9c0 \ubabb\ud55c\ub2e4. \uc774\ub97c \ucd08\uacfc\ud558\uae30 \uc704\ud574\uc11c\ub294 serviceContext.xml\ub97c \uc544\ub798\uc640 \uac19\uc774 \uc218\uc815\ud574 \uc8fc\uc5b4\uc57c \ud55c\ub2e4.<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>\ud1a0\ud070\uc758 \ucd5c\ub300 \uae30\uac04 \uc124\uc815<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\/WEB-INF\/internal\/serviceContext.xml<br>\ud30c\uc77c\uc744 \uc5f4\uc5b4\ubcf4\uba74 \uac01 \ud1a0\ud070 \uc885\ub958\ubcc4\ub85c \uc544\ub798\uc640 \uac19\uc740 XML \ucf54\ub4dc\uac00 \uc815\uc758\ub418\uc5b4 \uc788\ub2e4.<br>\uc774 \uc911 maxDaysToLive \ud504\ub85c\ud37c\ud2f0\ub97c \uc218\uc815\ud558\uc5ec \ucd5c\ub300 \ub298\ub9b4 \uc218 \uc788\ub294 \ud1a0\ud070\uc758 \uae30\uac04\uc744 \uc124\uc815\ud55c\ub2e4.<br>\ub514\ud3f4\ud2b8\ub294 90\uc77c\uc774\ub098 36500\uc77c\ub85c \uc218\uc815\ud558\uc5ec \uac70\uc758 \ubb34\uc81c\ud55c\uc73c\ub85c \uc124\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">&lt;bean id=\u201ddownloadToken\u201d class=\u201dcom.fortify.manager.security.ws.AuthenticationTokenSpec\u201d>\n  &lt;property name=\u201dkey\u201d value=\u201dAnalysisDownloadToken\u201d\/>\n  &lt;property name=\u201dmaxDaysToLive\u201d value=\u201d36500\u2033\/>\n  &lt;property name=\u201dactionPermitted\u201d>\n    &lt;list value-type=\u201djava.lang.String\u201d>\n      &lt;value>FPRDownloadRequest&lt;\/value>\n      &lt;value>GetSingleUseFPRDownloadTokenRequest&lt;\/value>\n      &lt;value>ActiveProjectVersionListRequest&lt;\/value>\n      &lt;value>SearchProjectVersionRequest&lt;\/value>\n      &lt;value>ProjectListRequest&lt;\/value>\n    &lt;\/list>\n  &lt;\/property>\n  &lt;property name=\u201dterminalActions\u201d>\n    &lt;list value-type=\u201djava.lang.String\u201d>\n      &lt;value>InvalidateTokenRequest&lt;\/value>\n    &lt;\/list>\n  &lt;\/property>\n&lt;\/bean><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc218\uc815 \ud6c4\uc5d0\ub294 SSC\ub97c \uc7ac\uc2dc\uc791\ud574\uc57c \uc801\uc6a9\ub41c\ub2e4.<\/p>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\"><li>\uac01 \ud1a0\ud070\ubcc4 \uc0ac\uc6a9\uae30\uac04 \uc7ac\uc124\uc815<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">\uc0ac\uc6a9 \uc608)<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">admin \uacc4\uc815\uc758 AnalysisDownloadToken\uc758 \uc0ac\uc6a9\uae30\uac04\uc744 15\ub144(5400\uc77c)\uc73c\ub85c \uc870\uc815\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 token -gettoken AnalysisDownloadToken -user admin -daysToLive 5400<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ubcc0\uacbd\ub41c \uacb0\uacfc\ub294 \uc544\ub798 \uba85\ub839\uc744 \uc0ac\uc6a9\ud558\uc5ec \ud655\uc778\ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 listtokens -user admin<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">\u25a0 \ud1a0\ud070 \uc885\ub958 \ucd94\uac00\ud558\uae30<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">\/WEB-INF\/internal\/serviceContext.xml<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\ud30c\uc77c\uc758 \uc801\ub2f9\ud55c \ubd80\ubd84\uc5d0 \ud1a0\ud070 bean\uc744 \ucd94\uac00\ud558\uace0 SSC\ub97c \uc7ac\uc2dc\uc791 \ud55c\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">NewToken\uc744 \ucd5c\ub300 \uad8c\ud55c\uc73c\ub85c \ucd94\uac00\ud55c \uc608:<\/p>\n\n\n\n<pre class=\"wp-block-syntaxhighlighter-code\">        &lt;bean id=\"NewToken\" class=\"com.fortify.manager.security.ws.AuthenticationTokenSpec\">\n            &lt;property name=\"key\" value=\"NewToken\"\/>\n            &lt;property name=\"capabilityDescription\">\n                &lt;value>\n                    &lt;![CDATA[\n                    This multi-use token specification should be used to facilitate authentication to Software\n                    Security Center (SSC) when a user wishes to programmatically review issues and perform audit actions.\n                    ]]>\n                &lt;\/value>\n            &lt;\/property>\n            &lt;property name=\"maxDaysToLive\" value=\"36500\"\/>\n            &lt;property name=\"actionPermitted\">\n                &lt;list value-type=\"java.lang.String\">\n                    &lt;value>(GET|DELETE)=\/api\/v\\d+\/reports\/\\d+&lt;\/value> &lt;!-- get report | delete report -->\n                    &lt;value>(GET|POST)=\/api\/v\\d+\/reports&lt;\/value> &lt;!-- get reports | generate report -->\n                    &lt;value>(GET|PUT|POST|DELETE|HEAD|OPTIONS)=\/api\/.*&lt;\/value>\n                    &lt;value>ActiveProjectVersionListRequest&lt;\/value>\n                    &lt;value>AuditViewRequest&lt;\/value>\n                    &lt;value>BatchCreateUpdateAndAssignCustomTagsRequest&lt;\/value>\n                    &lt;value>BugParamsRequest&lt;\/value>\n                    &lt;value>BugTrackerAssignmentRequest&lt;\/value>\n                    &lt;value>CheckCurrentUserPermissionRequest&lt;\/value>\n                    &lt;value>CloudCtrlUrlRequest&lt;\/value>\n                    &lt;value>CloudOneTimeJobTokenRequest&lt;\/value>\n                    &lt;value>CreateAuditSessionRequest&lt;\/value>\n                    &lt;value>CustomTagListForProjectVersionRequest&lt;\/value>\n                    &lt;value>DeleteSavedReportsRequest&lt;\/value>\n                    &lt;value>DeregisterWIERequest&lt;\/value>\n                    &lt;value>DescriptionAndRecommendationRequest&lt;\/value>\n                    &lt;value>downloadFileTransferURLAccess&lt;\/value>\n                    &lt;value>FileBugRequest&lt;\/value>\n                    &lt;value>FilterSetsAndFoldersUpdateRequest&lt;\/value>\n                    &lt;value>FPRDownloadRequest&lt;\/value>\n                    &lt;value>FPRUploadRequest&lt;\/value>\n                    &lt;value>GenerateReportRequest&lt;\/value>\n                    &lt;value>GET=\/api\/v\\d+\/cloudmappings\/mapByVersion\\w+&lt;\/value>\n                    &lt;value>GET=\/api\/v\\d+\/projectVersions\/\\d+\/artifacts&lt;\/value> &lt;!-- get artifacts in PV -->\n                    &lt;value>GET=\/api\/v\\d+\/projectVersions&lt;\/value> &lt;!-- get project versions -->\n                    &lt;value>GET=\/download\/.*&lt;\/value>\n                    &lt;value>GetDynamicScanDetailsRequest&lt;\/value>\n                    &lt;value>GetDynamicScanSummariesRequest&lt;\/value>\n                    &lt;value>GetFeaturesetsRequest&lt;\/value>\n                    &lt;value>GetProjectVersionIdentifiersRequest&lt;\/value>\n                    &lt;value>GetSingleUseFPRDownloadTokenRequest&lt;\/value>\n                    &lt;value>GetSingleUseFPRUploadTokenRequest&lt;\/value>\n                    &lt;value>GroupingValuesRequest&lt;\/value>\n                    &lt;value>InvalidateAuditSessionRequest&lt;\/value>\n                    &lt;value>IssueListRequest&lt;\/value>\n                    &lt;value>LinkProjectVersionRequest&lt;\/value>\n                    &lt;value>OnParameterChangeRequest&lt;\/value>\n                    &lt;value>PerformAuditActionRequest&lt;\/value>\n                    &lt;value>POST=\/api\/v\\d+\/artifacts\/(action\/purge\/?|\\d+\/action\/?)&lt;\/value> &lt;!-- submit artifact purge action -->\n                    &lt;value>POST=\/api\/v\\d+\/projectVersions\/(action\/purge\/?|\\d+\/action\/?)&lt;\/value> &lt;!-- submit PV purge action -->\n                    &lt;value>POST=\/download\/.*&lt;\/value> &lt;!-- required by flex -->\n                    &lt;value>ProjectListRequest&lt;\/value>\n                    &lt;value>ProjectTemplateDownloadRequest&lt;\/value>\n                    &lt;value>ProjectTemplateListRequest&lt;\/value>\n                    &lt;value>ProjectVersionHasAuditedIssuesRequest&lt;\/value>\n                    &lt;value>ProjectVersionIssueAuditHistoryRequest&lt;\/value>\n                    &lt;value>PurgeProjectVersionRequest&lt;\/value>\n                    &lt;value>RegisterWIERequest&lt;\/value>\n                    &lt;value>reportFileTransferURLAccess&lt;\/value>\n                    &lt;value>SavedReportByIdRequest&lt;\/value>\n                    &lt;value>SavedReportListForProjectVersionRequest&lt;\/value>\n                    &lt;value>SavedReportListRequest&lt;\/value>\n                    &lt;value>SearchProjectVersionRequest&lt;\/value>\n                    &lt;value>SetDynamicScanStatusRequest&lt;\/value>\n                    &lt;value>TestBugTrackerConfigurationRequest&lt;\/value>\n                    &lt;value>TraceNodesRequest&lt;\/value>\n                    &lt;value>UnifiedLoginTokenExtensionRequest&lt;\/value>\n                    &lt;value>uploadFileTransferURLAccess&lt;\/value>\n                    &lt;value>VerifyCloudOneTimeJobTokenRequest&lt;\/value>\n                &lt;\/list>\n            &lt;\/property>\n            &lt;property name=\"terminalActions\">\n                &lt;list value-type=\"java.lang.String\">\n                    &lt;value>InvalidateTokenRequest&lt;\/value>\n                    &lt;value>DELETE=\/api\/v\\d+\/auth\/token&lt;\/value>\n                &lt;\/list>\n            &lt;\/property>\n        &lt;\/bean><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\uc774\ub807\uac8c \ucd94\uac00\ud55c \ud1a0\ud070\ud0a4\ub294 \uc544\ub798\ucc98\ub7fc \uc0ac\uc6a9\ub420 \uc218 \uc788\ub2e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">$ fortifyclient -url http:\/\/10.10.10.47:8080\/ssc -user admin -password mypass123 token -gettoken JenkinsToken -daysToLive 3650<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Authorization Token: 6c6205ae-1c22-4ea9-858e-cae2e6e3a8ad<\/p>\n\n\n\n<div class=\"wp-block-file\"><a href=\"\/blog\/wp-content\/uploads\/2020\/06\/serviceContext.xml\">serviceContext<\/a><a href=\"\/blog\/wp-content\/uploads\/2020\/06\/serviceContext.xml\" class=\"wp-block-file__button\" download>\ub2e4\uc6b4\ub85c\ub4dc<\/a><\/div>\n","protected":false},"excerpt":{"rendered":"<p>\ud1a0\ud070\uc740 Fortify API\ub610\ub294 fortifyclinet \uc720\ud2f8\ub9ac\ud2f0\uc5d0\uc11c SSC\uc758 ID\/Password \ub300\uc2e0 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \uc77c\uc885\uc758 \ubb38\uc790\uc5f4 \uc774\uba70, fortifyclient\ub97c \uc0ac\uc6a9\ud574 SSC\ub85c \ubd80\ud130 \ubc1c\uae09\ubc1b\uace0 \uba85\uc2dc\ub41c \uae30\uac04 \ub3d9\uc548\ub9cc \ud55c\uc815\uc801\uc73c\ub85c \uc0ac\uc6a9\ud560 \uc218 \uc788\ub2e4. \ud3ec\ud2f0\ud30c\uc774\uc5d0\uc11c \uac01 \uae30\ub2a5\uc758 \uc778\uc99d\uc5d0 \uc0ac\uc6a9\ub418\ub294 \ud1a0\ud070\uc758 \uc885\ub958 \ubc0f \uad8c\ud55c\uc815\ubcf4\ub294 SSC \ubc11\uc5d0 WEB-INF\/internal\/serviceContext.xml \ud30c\uc77c\uc5d0 \uba85\uc2dc\ub418\uc5b4 \uc788\ub2e4. \ud1a0\ud070\uc740 \uc0ac\uc6a9\uc790\ubcc4\ub85c \uad8c\ud55c\ubcc4\ub85c \ubaa8\ub450 \ub2e4\ub974\uba70, user\ub97c \uba85\uc2dc\ud558\uc9c0 \uc54a\uc73c\uba74 \uacf5\ud1b5 \ud1a0\ud070\uc774 \uc0ac\uc6a9\ub41c\ub2e4. \u25a0 \ud1a0\ud070 \ubc1c\uae09 \ubc1b\uae30 [&hellip;]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_import_markdown_pro_load_document_selector":0,"_import_markdown_pro_submit_text_textarea":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[66],"tags":[],"class_list":["post-3291","post","type-post","status-publish","format-standard","hentry","category-computing_fortify"],"_links":{"self":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3291","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=3291"}],"version-history":[{"count":0,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=\/wp\/v2\/posts\/3291\/revisions"}],"wp:attachment":[{"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=3291"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=3291"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/hasu0707.duckdns.org\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=3291"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}