Yandex ID Authentication for Website

Yandex ID Authentication Implementation for Websites

Yandex ID is Yandex's authorization system. Relevant for Russian audiences—many users have Yandex.Mail, and login via it reduces registration friction. Implemented via OAuth2 with OpenID Connect support.

Registering Application

1. oauth.yandex.ru → Create application
2. Specify name, type—Web services
3. Add Callback URI: https://example.com/auth/yandex/callback
4. In Access section add: Yandex ID (email, username, avatar)
5. Save ClientID and Client secret

Laravel Socialite

composer require laravel/socialite socialiteproviders/yandex

// config/services.php
'yandex' => [
    'client_id'     => env('YANDEX_CLIENT_ID'),
    'client_secret' => env('YANDEX_CLIENT_SECRET'),
    'redirect'      => env('YANDEX_REDIRECT_URI'),
],

class YandexAuthController extends Controller
{
    public function redirect(): RedirectResponse
    {
        return Socialite::driver('yandex')->redirect();
    }

    public function callback(): RedirectResponse
    {
        try {
            $yandexUser = Socialite::driver('yandex')->user();
        } catch (\Exception $e) {
            return redirect('/login')->withErrors(['yandex' => 'Yandex authorization error']);
        }

        $user = User::updateOrCreate(
            ['yandex_id' => $yandexUser->getId()],
            [
                'name'              => $yandexUser->getName(),
                'email'             => $yandexUser->getEmail(),
                'email_verified_at' => now(),
                'avatar'            => $yandexUser->getAvatar(),
            ]
        );

        Auth::login($user, remember: true);
        return redirect()->intended('/dashboard');
    }
}

Getting Data via Yandex ID API

Beyond OAuth callback, request data directly via API:

$response = Http::withToken($accessToken)
    ->get('https://login.yandex.ru/info', ['format' => 'json']);

$data = $response->json();
// $data['id']           — unique ID
// $data['login']        — login
// $data['default_email']— primary email
// $data['real_name']    — name
// $data['display_name'] — display name
// $data['default_avatar_id'] — avatar ID

Yandex Avatar follows template:

https://avatars.yandex.net/get-yapic/{avatar_id}/islands-200

Sizes: islands-50, islands-100, islands-200.

Linking with Existing Account

$user = User::where('yandex_id', $yandexUser->getId())->first()
    ?? User::where('email', $yandexUser->getEmail())->first();

if ($user && !$user->yandex_id) {
    $user->update(['yandex_id' => $yandexUser->getId()]);
} elseif (!$user) {
    $user = User::create([
        'yandex_id'         => $yandexUser->getId(),
        'name'              => $yandexUser->getName(),
        'email'             => $yandexUser->getEmail(),
        'email_verified_at' => now(),
    ]);
}

Timeline

Standard OAuth2 flow—1–2 days.