OAuth2 authentication in Yandex: obtaining access and refresh tokens

• Go to https://oauth.yandex.ru/client/new and create an "application". Fill

1. Application name
2. Platforms > Web services > Callback URI. This can be any URI (we will use example.org)
3. Scope

This will give us <ID> and <Password>.

• Go to https://oauth.yandex.ru/authorize?response_type=code&client_id=<ID>. You will be redirected to https://example.org/?code=CODE.

Thus we obtained <ID>, <Password>, and <CODE>.

• Run

curl -sS -X POST https://oauth.yandex.ru/token \
    -d grant_type=authorization_code \
    -d code=<CODE> \
    -d client_id=<ID> \
    -d client_secret=<Password>| jq .

This produces:

{
  "access_token": "<Access token>",
  "expires_in": xxxxxxxx,
  "refresh_token": "<Refresh token>",
  "token_type": "bearer"
}