Log in as admin
Edit Authenticated user role
Allow moodle/webservice:createtoken
Allow webservice/rest:use
Create a test user
Enable and configure webservices:
Enable web services
Enable JSON protocol
Enable Moodle mobile web service
Log out
Log in as user
Navigate to Preferences > Security keys from profile menu
Press Reset next in the Moodle mobile web service row
Perss Reset in the subsequent confirmation step
Confirm you see the message: "Copy the token now. It won't be shown again once you leave this page." along with details of the created token
When a user views their webservice tokens, and presses the "Reset" operation, they just see the message "The selected token was reset " - the actual token content is impossible to view