Skip to content

Manage Tokens

Beta Notes

For now during the Beta phase, you need to generate the project token manually as described here. In the near future, this functionality will be included into the Studio application as well as the CLI and then there is rarely the need to do this manually. Still it's good to know how to do this if you want to have more fine-grained access permissions to your spaces.

HERE XYZ Hub APIs use project tokens that are tied to your appId&appCode or HERE Accounts SSO identity. Make sure to keep your appId&appCode safe and don't include them directly in any web pages as they are the key to generate new access tokens.

Usually you would use two tokens:

  • token for working - this has read&write permissions on your spaces and you should keep this to yourself
  • token for sharing - this should be generated with read-only permissions and can be included in web pages for publishing your data

Token Administration

Log into the XYZ Hub Token Generator site with your appId&appCode:

https://xyz.api.here.com/token-ui/

Developer Overview

Assign Access Rights

Once logged in, you see the list of spaces that are available to your account and the permissions that are available to be encoded in the token.

Available permissions for the token are:

  • ReadFeatures
  • CreateFeatures
  • UpdateFeatures
  • DeleteFeatures
  • ManageSpaces

From the list, select the spaces the token should have access to. Note that some spaces can only be read and not written to. It's a good practice to keep the number rights and layers to the minimum needed for your project.

Developer Overview

Generate Token

Next click on Generate Token to see you token:

Developer Overview

Note

You can revoke the token at any time by just deleting it on the Manage Token tab.