Search code examples
here-apihere-maps-restheremaps

Here Maps - cannot authorize to Maps Feedback API

Here Maps provide Maps Feedback API for i.e. submit information about missing places on their maps. I created a project and generate API Key which I used for Places API with success. Next, I tried to use it with Feedback API, but it failed. Oddly enough without any credentials I got 200 OK.

My requests:

  1. Without any APP_ID or KEY in Headers
curl --location --request POST 'https://maphub.api.here.com/feedback/' \
--header 'Content-Type: application/vnd.here.layerObjectList+json; charset=UTF-8' \
--header 'Accept-Charset: charset=UTF-8' \
--header 'Auth-Service-Id: here_app' \
--header 'Group-Id: FGx1AWaAzKOo0imNkLmf' \
--data-raw MY_DATA

response: 200 OK with body containing id of feedback (important for checking status).

  1. Like above but for maphub.cit.api.here.com instead of maphub.api.here.com

response: 401 Unauthorized: Authentication failed. Reason: Missing authentication credentials

  1. With APP_ID and API_KEY
curl --location --request POST 'https://maphub.api.here.com/feedback/' \
--header 'Content-Type: application/vnd.here.layerObjectList+json; charset=UTF-8' \
--header 'Auth-Identifier: MY_APP_ID' \
--header 'Auth-Secret: MY_API_KEY' \
--header 'Group-Id: FGx1AWaAzKOo0imNkLmf' \
--header 'Auth-Service-Id: here_app' \
--data-raw MY_DATA

response: 401 Unauthorized: Authentication for app_id MY_APP_ID FAILED (wrong app_code provided).

I the dashboard I don't have any app_code so I put in Auth-Secret my API_KEY.

  1. Feedback status without any headers
curl --location --request GET 'https://maphub.api.here.com/feedback/ID_FROM_FIRST_REQUEST'

response: 403 Forbidden

How I can correctly authorize to Here Maps Feedback API? For me it's important to send feedback and then check its status.

Solution

  • The REST endpoints *.api.here.com expect APP_ID and APP_CODE credentials.

    However, APP_ID and APP_CODE credentials have been deprecated in December 2019 in favor of the API Key (which relates to an APP_ID, but the latter is not sent anymore in the request).

    I assume you created your developer account project after the change, which is why you have no possibility to create the legacy APP_ID and APP_CODE pair for REST services.

    Normally, REST services now offer a new endpoint in *.hereapi.com precisely for authentication with API Key, while still offering the legacy endpoint *.api.here.com for compatibility reason.

    The problem is, I do not see the new endpoint for the Map Feedback API. It does not seem to exist. This is why I'd suggest to contact [email protected], by mentioning the issue, and that you therefore need an APP_CODE for your generated APP_ID.

    Older accounts have the following section:

    enter image description here