Disable v1 token plaintext retrieval #20492
Description
NetBox version
v4.4.2
Feature type
Change to existing functionality
Proposed functionality
Remove the ability to retrieve the plaintext key from legacy (v1) API tokens. This entails removing the ALLOW_TOKEN_RETRIEVAL configuration parameter, which is disabled by default.
Use case
An improved API token implementation is being developed for NetBox v4.5 (see #20210), which will no longer rely on storing token plaintexts in the database. Support for legacy (v1) tokens will be removed in a future NetBox release. This change is a natural step toward that eventuality, and delivers improved operational security in the interim.
Database changes
This change does not entail any modifications to the database or token data. It is only an application level change.
External dependencies
N/A