---
title: "Requests a token for a registered device"
method: POST
path: "/v2/token"
tags: ["Ingestion"]
---

# Requests a token for a registered device

`POST /v2/token`

Authenticates a device to HERE Tracking and requests a device access token.

A device must provide a valid device access token when it sends telemetry to HERE Tracking.
Tokens can be obtained upon a successful device authentication.

The device token requests must be signed. The signature method uses the OAuth 1.0 standard.
For more information on this standard, see the [OAuth Core 1.0](https://oauth.net/core/1.0/) specification.

Tokens can be requested only by claimed devices.
A claimed device license, that is ```deviceId``` and ```deviceSecret``` credential pair, is used for creating a signed token request.

> See the Authentication section for details on how to generate a signed token request.
> A new signature must be created for each device access token request.
> Signatures can only be used once.

## Headers

- `X-Request-Id` string, uuid
- `authorization` string, required

## Response `200`

Successful

- object
  - `accessToken` string
  - `expiresIn` integer

## Other responses

- `400` — Bad request The request object is in an incorrect format or has values that are invalid or out of range. If available, further error details are provided in the response body.
- `401` — *Timestamp wrong* When the request timestamp is skewed by more than 10 second from the server time, the `x-here-timestamp` header with the current server timestamp is added to the response. *Incorrect Signature* If the OAuth signature is incorrect, the response code will be 401, and *no* `x-here-timestamp` header will be added.
- `403` — Forbidden The account does not have the correct privileges
- `404` — Invalid license
- `412` — Unclaimed Device If the device ID is valid but the device has not yet been claimed by an owner, an error response will be returned.

---

[API](https://skmtc.net/here/apis/tracking.md) · [All operations](https://skmtc.net/here/apis/tracking/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/here/tracking/versions/efa162f7023c/schema)