Getting 403 with token generated using custom policy

Hi i am running vault in my local in dev mode. I have secrets in the path secret/myapp. I am trying to get those secrets using spring cloud config server.
i can get response for the curl (http://localhost:8888/config/myapp/default) usingToken generated using this policy

path “secret/*” {
capabilities = [“read”]
}

but getting 403 Forbidden: "{“errors”:[“1 error occurred:\n\t* permission denied\n\n”]} with policy
path “secret/myapp*” {
capabilities = [“read”]
}

what i am missing here ??