Get Shared Map Endpoint

GET

/maps/shared/{token}

const url = 'https://example.com/maps/shared/example';
const options = {method: 'GET', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request GET \
  --url https://example.com/maps/shared/example \
  --header 'Authorization: Bearer <token>'

Get a shared map by token. Optionally authenticated for non-public layers.

SEC-S08 (Phase 1062-05): emits Content-Security-Policy: frame-ancestors 'self' [<allowed_origins>...] on the response, derived from the active EmbedToken for this map. When no EmbedToken exists or allowed_origins is empty, defaults to frame-ancestors 'self'. The SecurityHeadersMiddleware respects this route-level CSP and skips emitting X-Frame-Options: DENY.

Authorizations

OAuth2PasswordBearer

Parameters

Path Parameters

token

required

Token

string

Responses

200

Successful Response

application/json

SharedMapResponse

object

basemap_config

Any of:

BasemapConfig
null

BasemapConfig

object

background_color

Any of:

string
null

string

basemap_position

Any of:

BasemapPosition
null

BasemapPosition

Whether the basemap renders below (‘bottom’, default) or above (‘top’) data layers.

string

Allowed values: bottom top

boundary_visibility

BasemapSublayerVisibility

Administrative boundary sublayer visibility where supported.

string

default: full

Allowed values: full subtle hidden

building_visibility

Building Visibility

Whether supported building/3D building basemap layers are shown.

boolean

default: true

label_mode

BasemapLabelMode

Basemap label prominence.

string

default: full

Allowed values: full subtle hidden

land_water_tone

BasemapLandWaterTone

Land and water color treatment where supported.

string

default: default

Allowed values: default muted contrast monochrome

opacity

Opacity

Master basemap opacity 0.0-1.0

number

default: 1 <= 1

projection

Any of:

BasemapProjection
null

BasemapProjection

Map projection. ‘mercator’ (default) or experimental ‘globe’.

string

Allowed values: mercator globe

relief_contrast

Any of:

BasemapReliefContrast
null

BasemapReliefContrast

string

Allowed values: soft standard strong

road_visibility

BasemapSublayerVisibility

Road and transit sublayer visibility where supported.

string

default: full

Allowed values: full subtle hidden

sublayer_overrides

Any of:

object
null

object

key

additional properties

SublayerOverride

Per-sublayer style override for a single basemap sublayer.

All fields are nullable — a None value means “use the basemap default”. Only #RRGGBB hex strings are accepted for color fields; None means the basemap default color is preserved. Numeric ranges are clamped at validation time (Pydantic ge/le constraints).

The key set of BasemapConfig.sublayer_overrides is treated as opaque (forward-compatible with future sublayer IDs) — see CONTEXT.md D-01.

Security: extra=“forbid” locks the D-14 scope guardrail: unknown style axes such as dash patterns, line caps, halo blur, and text-font are rejected at validation time (T-1059A-03).

object

casing_color

Any of:

string
null

string

casing_width

Any of:

number
null

number

<= 20

max_zoom

Any of:

number
null

number

<= 24

min_zoom

Any of:

number
null

number

<= 24

opacity

Any of:

number
null

number

<= 1

stroke_color

Any of:

string
null

string

stroke_width

Any of:

number
null

number

<= 20

basemap_style

required

Basemap Style

string

bearing

required

Bearing

number

center_lat

required

Center Lat

number

center_lng

required

Center Lng

number

description

required

Any of:

string
null

string

has_non_public_layers

Has Non Public Layers

boolean

layers

required

Layers

Array<object>

SharedLayerResponse

object

column_info

Any of:

Array<object>
null

Array<object>

object

key

additional properties

any

dataset_id

required

Dataset Id

string

dataset_name

required

Dataset Name

string

dataset_record_type

Any of:

string
null

string

dem_vertical_units

Any of:

string
null

string

display_name

Any of:

string
null

string

feature_count

Any of:

integer
null

integer

filter

Any of:

Array
null

Array

geometry_type

required

Any of:

string
null

string

required

string

is_3d

Any of:

boolean
null

boolean

is_dem

Any of:

boolean
null

boolean

label_config

Any of:

object
null

object

key

additional properties

any

layer_type

Layer Type

string

default: vector_geolens

layout

required

Layout

object

key

additional properties

any

opacity

required

Opacity

number

paint

required

Paint

object

key

additional properties

any

popup_config

Any of:

PopupConfig
null

PopupConfig

Per-layer popup configuration: enable/disable + custom title template

ordered visible-fields allowlist. Persisted as JSONB on map_layers.

object

enabled

required

Enabled

boolean

expression

Any of:

string
null

string

<= 500 characters

visible_fields

Any of:

Array<string>
null

Array<string>

<= 100 items

show_in_legend

Show In Legend

boolean

default: true

sort_order

required

Sort Order

integer

style_config

Any of:

object
null

object

key

additional properties

any

table_name

required

Table Name

string

tile_url

required

Tile Url

string

visible

required

Visible

boolean

legend_title

Any of:

string
null

string

name

required

Name

string

pitch

required

Pitch

number

show_basemap_labels

Show Basemap Labels

boolean

default: true

terrain_config

Any of:

TerrainConfig
null

TerrainConfig

object

enabled

Enabled

boolean

exaggeration

Exaggeration

number

default: 1 <= 10

source_dataset_id

Any of:

string
null

string format: uuid

zoom

required

Zoom

number

Example

{
  "basemap_config": {
    "basemap_position": "bottom",
    "boundary_visibility": "full",
    "building_visibility": true,
    "label_mode": "full",
    "land_water_tone": "default",
    "opacity": 1,
    "projection": "mercator",
    "relief_contrast": "soft",
    "road_visibility": "full"
  },
  "has_non_public_layers": false,
  "layers": [
    {
      "layer_type": "vector_geolens",
      "show_in_legend": true
    }
  ],
  "show_basemap_labels": true,
  "terrain_config": {
    "enabled": false,
    "exaggeration": 1
  }
}

400

Bad request — invalid payload

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}

401

Unauthorized — missing or invalid credentials

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}

403

Forbidden — caller lacks write access

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}

404

Not found

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}

409

Conflict — resource state prevents the operation

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}

422

Validation error

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}

500

Internal server error

ProblemDetail

object

detail

required

Detail

string

status

required

Status

integer

title

required

Title

string

type

Type

string

default: about:blank

Example

{
  "type": "about:blank"
}