Problem: IDs of API tokens are not retrieved in full form (only in short ones)

[ShaggyGS]

Issue

Hello,

I'm not sure if that's correct behaviour since version 2.14 and if so, it should be corrected in the docs and probably mentioned in the migration guide too...

Before version 2.14 when you made a GET request to /api/user/tokens, you got the full access token... Since version 2.14, you get only the short form of the access token. That means when you used that route to get the access token and then use that token futher for authorization, it will break now your API requests, because you get invalid token...

There's still mentioned in the docs, you get access token with that GET route mentioned earlier:

Which is only true, when you create the token with POST request...

Now there's a question if it's issue on the backend side and you should get the full token or in the docs. I understand for security reasons you usually see the full token during creation and then just part of it... But then it should be corrected and mentioned in the migration guide for people who used it the way we did.

Thanks!

Impact

Web-Backend (APIs)

Installation method

Docker

Database

MySQL

Browser

No response

Semaphore Version

v2.14.10-bcdb678-1746645798

Ansible Version

Logs & errors

No response

Manual installation - system information

No response

Configuration

No response

Additional information

No response

[fiftin]

Hi Yes,

It was changed for security reason.

Now you can get Key only when creating it.