Vault API Explorer does not allow parameters on /token/create

[identitymonk]

Hi,

Describe the bug
When using Vault API Explorer (through portal) and trying to create a token, I cannot specified all parameters allowed in the corresponding standard API call.

To Reproduce
Steps to reproduce the behavior:

1. Open Vault portal and authenticate
2. Launch graphical CLI and execute api
3. Filter API on /token/create
4. POST on /token/create expects No parameters

Expected behavior
Parameters as in https://www.vaultproject.io/api-docs/auth/token/#create-token should be allowed

Environment:

• Vault Server Version 1.3.4

[tyrannosaurus-becks]

Thanks for posting this! Just to confirm, I am also able to reproduce this issue.

[bmcguire]

Also would it be possible to create tokens from the Vault-UI?

[hashishaw]

Hello, thanks for your patience!

@bmcguire Yes, as the warning message shows when navigating to the api explorer page:

The "Try it out" functionality in this API explorer will make requests to this Vault server on your behalf.

IF YOUR TOKEN HAS THE PROPER CAPABILITIES, THIS WILL CREATE AND DELETE ITEMS ON THE VAULT SERVER.

Your token will also be shown on the screen in the example curl command output.

In terms of the bug reported, this was addressed in #16938 for 1.12 and patched in 1.10.11 and 1.11.4. The API explorer shows the params as below: