Why `user_create_token` does not return the token value ?

[phamour]

Hi there,

As per the doc, the user_create_token of UserApi returns None since the response body is empty. In this case, one can only create tokens without the possibility to really use them programmatically.

However, the bare API of Gitea does return the token object in terms of {"id":1,"name":"mytoken","sha1":"xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx","token_last_eight":"xxxxxxxx"} (docs here).

Does this behavior come from some specific consideration at a security level ? or it was just generated without custom tuning ?

Thanks a lot in advance.