AOL

opencollection: 1.0.0
info:
  name: Yahoo (formerly AOL) OAuth 2.0 and OpenID Connect API
  version: 1.0.0
items:
- info:
    name: OAuth2
    type: folder
  items:
  - info:
      name: Authorization request
      type: http
    http:
      method: GET
      url: https://api.login.yahoo.com/oauth2/request_auth
      params:
      - name: client_id
        value: ''
        type: query
        description: Consumer Key issued when registering an app at developer.yahoo.com
      - name: redirect_uri
        value: ''
        type: query
        description: URI Yahoo will redirect to after the user authorizes the app
      - name: response_type
        value: ''
        type: query
        description: Must be `code` for the Authorization Code grant
      - name: scope
        value: ''
        type: query
        description: Space-separated OpenID Connect scopes (for example `openid profile email`)
      - name: state
        value: ''
        type: query
        description: Opaque value returned unchanged on the redirect; use to prevent CSRF
      - name: language
        value: ''
        type: query
        description: Language identifier for the Yahoo authorization UI
    docs: 'Redirects the user to Yahoo''s authorization page where the user

      authenticates and grants the requesting application access. On

      success Yahoo redirects back to `redirect_uri` with a `code`

      query parameter that can be exchanged at the token endpoint.

      '
  - info:
      name: Token exchange and refresh
      type: http
    http:
      method: POST
      url: https://api.login.yahoo.com/oauth2/get_token
      body:
        type: form-urlencoded
        data:
        - name: client_id
          value: ''
        - name: client_secret
          value: ''
        - name: redirect_uri
          value: ''
        - name: grant_type
          value: ''
        - name: code
          value: ''
        - name: refresh_token
          value: ''
      auth:
        type: basic
        username: '{{username}}'
        password: '{{password}}'
    docs: 'Exchanges an authorization code for access and refresh tokens, or

      exchanges a refresh token for a new access token. The `grant_type`

      parameter selects the behaviour. Client credentials may be passed

      in the body or in an `Authorization: Basic` header with

      base64-encoded `client_id:client_secret`.

      '
- info:
    name: OpenID Connect
    type: folder
  items:
  - info:
      name: OpenID Connect UserInfo
      type: http
    http:
      method: GET
      url: https://api.login.yahoo.com/openid/v1/userinfo
      auth:
        type: bearer
        token: '{{bearerToken}}'
    docs: 'Returns claims about the authenticated end user. The request must

      carry a valid OAuth 2.0 access token issued with the `openid`

      scope as a Bearer token.

      '
  - info:
      name: JSON Web Key Set
      type: http
    http:
      method: GET
      url: https://api.login.yahoo.com/openid/v1/certs
    docs: 'Returns the JWKS used to verify Yahoo-issued ID tokens. Clients

      should cache the keys and rotate based on `kid` values present in

      the ID token header.

      '
bundled: true