diff --git a/vault/core.go b/vault/core.go index 8725945b9..2cc8021bf 100644 --- a/vault/core.go +++ b/vault/core.go @@ -672,7 +672,10 @@ func (c *Core) handleLoginRequest(req *logical.Request) (*logical.Response, *log } if !strListSubset(te.Policies, []string{"root"}) { + // Append 'default' policy to the token being created te.Policies = append(te.Policies, "default") + // Update the response with the policies associated with token + auth.Policies = append(auth.Policies, "default") } if err := c.tokenStore.create(&te); err != nil {