View source for OAuth2 authentication in Yandex: obtaining access and refresh tokens

* Go to https://oauth.yandex.ru/client/new and create an "application". Fill
:# '''Application name'''
:# Platforms > Web services > '''Callback URI'''. This can be any URI (we will use example.org)
:# '''Scope'''

This will give us <code><ID></code> and <code><Password></code>.

* Go to <nowiki>https://oauth.yandex.ru/authorize?response_type=code&client_id=<ID></nowiki>. You will be redirected to <nowiki>https://example.org/?code=<CODE></nowiki>.
Thus we obtained <code><ID></code>, <code><Password></code>, and <code><nowiki><</nowiki>CODE<nowiki>></nowiki></code>.
* Run
<pre>
curl -sS -X POST https://oauth.yandex.ru/token \
  -d grant_type=authorization_code \
  -d code=<nowiki><</nowiki>CODE<nowiki>></nowiki> \
  -d client_id=<ID> \
  -d client_secret=<Password>| jq .
</pre>

This produces:<pre>{
  "access_token": "<Access token>",
  "expires_in": xxxxxxxx,
  "refresh_token": "<Refresh token>",
  "token_type": "bearer"
}</pre>

* To refresh the codes run
<pre>
curl -sS -X POST https://oauth.yandex.ru/token \
  -d grant_type=refresh_token \
  -d refresh_token=<Refresh token> \
  -d client_id=<ID> \
  -d client_secret=<Password> | jq .
</pre>

This gives<pre>{
   "access_token" : "<New access token>",
   "refresh_token" : "<New refresh token>",
   "expires_in" : xxxxxxxx,
   "token_type" : "bearer"
}</pre>

[[Category: Linux]]