API /sys/generate-root

[devabuse]

Hi,

I'm trying to generate a new root token using the API. This works but returns an encoded_token. I am using an otp to call the /sys/generate/root/attempt.

The CLI interface provides a method to decode the root roken with the otp, but how do I do this using the rest API?

Thanks.

Regards,
Mike

[chrishoffman]

There is not one currently but may add one in the future. The process of decoding the token is a relatively simple XOR of the bytes of the OTP against the bytes of the token.

See https://github.com/hashicorp/vault/blob/master/command/operator_generate_root.go#L338-L348.

[devabuse]

Thank you. I will figure this out on my end.

[raskchanky]

I'm going to close this for now, since it looks like there's not much here for us to do. Feel free to reopen if you want to discuss further.

[PayalSasmal10]

Hi , could anyone know how to decode this encoded_root_token, i am unable to do this.

[mrioqueiroz]

Hi , could anyone know how to decode this encoded_root_token, i am unable to do this.

This Node.js module may help.