OAuth2 authentication in Yandex: obtaining access and refresh tokens

• Go to https://oauth.yandex.ru/client/new and create an "application". Fill

1. Application name
2. Platforms > Web services > Callback URI. This can be any URI (we will use example.org)
3. Scope

This will give us <ID> and <Password>.

• Go to https://oauth.yandex.ru/authorize?response_type=code&client_id=<ID>. Yoy will be redirected to https://example.org/?code=.

Thus we obtained <ID>, <Password>, and &#8203.

• Run

  curl -sS -X POST https://oauth.yandex.ru/token \

   -d grant_type=authorization_code \
   -d code=<CODE> \
   -d client_id=<ID> \

-d client_secret=<Password>| jq . This gives:

{
  "access_token": "AQAAAAAABtwbAAcxxvjAw4T1lEsdo2LeAubQ6vs",
  "expires_in": 31530461,
  "refresh_token": "1:SFiVi4AYNrcGyFiD:a8AkmmWDkZHfPQLUVkC888i6hctYhBQkTjZcNo3zeJOUyLckJ8Wq:4Jjw2oLglZp3H18lx75BIQ",
  "token_type": "bearer"
}