# Takes a user ID and returns a temporary token that can be exchanged for a real auth token.

Endpoint: POST /auth/exchange-token
Version: 2023-11-29
Security: oauth2, bearerAuth, apiKeyHeader

## Request fields (application/json):

  - `userId` (string, required)
    Peach's unique or lender's external identifier.

## Response 200 fields (application/json):

  - `data` (object)

  - `data.exchangeToken` (string)
    A random token that may be exchanged for a real token via the /auth/token endpoint