v1

latestOpenAPI 3.0.0HERE Documentation License2026-07-142162791.8 MB

Users

Gets a project-scoped user access token

Takes user access token, requested scope and returns project-scoped user access token.

post/users/v2/tokenExchange

Request body

accessTokenstring required

HERE Account user access token, obtained from login endpoint.

scopestring required

Requested scope of the access token. Must be an HRN identifying a project that the identified user has access to.

Example request

{
  "accessToken": "h1.2...EyS_b6g3uDcKnpknGWQ",
  "scope": "hrn:here:authorization::myrealm:project/my-project-0000"
}

Response

Success

The exchange was successful and a valid scoped access token was returned.

accessTokenstring

Project-scoped access token.

expiresIninteger

The lifetime in seconds of the access token. For example 86400 means the token will expire in 24 hours from the time the response was generated.

issuedTokenTypestring

The type of token issued when grantType is "urn:ietf:params:oauth:grant-type:token-exchange".

scopestring

Requested scope of the access token. Must be an HRN identifying a project that the identified user has access to.

tokenTypestring

The token type is 'Bearer'.

Example response

{
  "accessToken": "h1.2...EyS_b6g3uDcKnpknGWQ",
  "expiresIn": 86400,
  "issuedTokenType": "urn:ietf:params:oauth:token-type:access_token",
  "scope": "hrn:here:authorization::myrealm:project/my-project-0000",
  "tokenType": "Bearer"
}