netbox 3.6-beta1 - api tokens - keys now hidden in ui

[ITJamie]

Change Type

Correction

Area

Integrations/API

Proposed Changes

I noticed in the release notes for 3.6-beta1 there is no mention of the fact that API tokens are now partially hidden in the UI for both users under "API Tokens" and in the admin section.

This is a change from past behavior where API keys were viewable, which should probably get called out in the release notes.

[tagur87]

They are also obfuscated in the API: https://beta-demo.netbox.dev/api/users/tokens/

Also appears that you cannot even see the full token when allowing netbox to create the token for you.

[jeremystretch]

@tagur87 this is not related to any work done in v3.6. The ALLOW_TOKEN_RETRIEVAL configuration parameter was introduced in v3.4.0, and is currently disabled on the demo instance.

[ITJamie]

apologies, closing out

[jeremystretch]

API tokens are now partially hidden in the UI for both users under "API Tokens" and in the admin section.

@ITJamie I think you're right to flag this detail. Previously, token keys were always visible in the admin UI. Now that they've been moved to the proper frontend, admins also cannot view token keys when ALLOW_TOKEN_RETRIEVAL is disabled.

[ITJamie]

No probs ether way. I was comparing against the normal demo instance so i had assumed the config settings would be the same.

Probably good that it wasnt to catch this