Best practices for using the Yandex ID API
If you use the Yandex ID API, your app must be secure for users. To ensure the confidentiality of user data, follow these recommendations:
-
Before integration, make sure that your app complies with the Yandex OAuth Program Requirements.
-
Use separate projects for testing and production. Don't include both testing and production
redirect_urivalues in a single app. Test apps, just like production ones, must comply with the service's Terms of Use. -
Make sure you have provided a valid email address. You'll receive important emails about your app and any Yandex ID API updates at this address.
Tip
To change your contact details, go to the app's settings in your OAuth account. Make sure you've entered the correct app name and added an icon. Users will see this information on the permissions screen.
-
Request only the permissions that your app can't function without.
-
To create apps without restrictions, verify your account.
-
If you're registering an Android or iOS app, please specify all
package namevalues (for Android) orapp_idvalues (for iOS) that are required for user authorization.