WB CVE Gateway

API para receber inventário do GLPI e mapear CPE/CVE (NVD). Todas as rotas /v1/* exigem token.

Healthcheck: GET /health → {"ok": true}

Autenticação

Header:

Authorization: Bearer <GLPI_SHARED_TOKEN>

Endpoints

• POST /v1/glpi/snapshot — envia itens do GLPI (retorna job_id).
• GET /v1/jobs/{job_id}/result — busca status + resultado do job.
• GET /v1/glpi/jobs/{job_id} — alias do endpoint acima (pra facilitar no plugin).

Exemplo cURL

curl -s   -H "Content-Type: application/json"   -H "Authorization: Bearer <TOKEN>"   -d '{
    "source": {"glpi_url": "https://seu-glpi", "collector": "wblacklist", "collector_version": "1.1.x", "sent_at": "2026-02-08T12:30:00-03:00"},
    "items": [
      {"type": "software", "glpi_software_id": 123, "glpi_version_id": 456, "name": "Paint.NET", "publisher": "dotPDN LLC", "version": "5.1.11", "monitor": true}
    ]
  }'   https://cve.seu-dominio/v1/glpi/snapshot

curl -s   -H "Authorization: Bearer <TOKEN>"   https://cve.seu-dominio/v1/jobs/SEU_JOB_ID/result | jq