❗️Yango Deli authentication in the Partner’s system

OAuth 2.0 is always used for pull-method authorization. The Partner must set up this scheme on their server. Then access credentials must be provided through the manager, specifically:

• server address for sending requests (domain only, IP addresses are not supported);
• client_id;
• client_secret.

Using these credentials, Yango Deli requests a token by making a POST request to {host}/security/oauth/token. Values of client_credentials and read write are passed in the grant_type and scope parameters respectively.

Expected response header is Content-type: application/json.

With the obtained token, Yango Deli performs subsequent requests, placing it in the header as Authorization: Bearer token.

curl --location --request POST 'https://test.ru/security/oauth/token' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data-urlencode 'client_id=abv123' \
--data-urlencode 'client_secret=456vba' \
--data-urlencode 'grant_type=client_credentials' \
--data-urlencode 'scope=read write'

Request

/security/oauth/token

{
    "client_id": "987",
    "client_secret": "g8bKdBiIR9MutCObuexDm7nsgkaXU",
    "grant_type": "client_credentials",
    "scope": "read write"
}

Responses

{
    "access_token": "CObuexDm7nsgkaXUg8bKdBiIR9Mut",
    "expires_in": 300
}

[
    {
        "code": 400,
        "description": "Description of error"
    }
]

[
    {
        "code": 400,
        "description": "Description of error"
    }
]