Y Account Unified identity
OAuth 2.0 · FrameX ready

Connect FrameX. Keep identity central.

Y Account exposes a standards-based authorization-code flow with PKCE, short-lived JWT access tokens and refresh rotation.

Authorization Code + PKCE JWT · HS256 PKCE · S256
Sign in to continue Create an account Terms

Integration path

Register a FrameX client in the api_clients table, point its redirect URI at your application, and send users through /oauth/authorize. The placeholder is ready; supply real credentials to activate production traffic.

  1. Create an OAuth client with a registered redirect URI and secret hash.
  2. Redirect the user to /oauth/authorize with state and an optional S256 code challenge.
  3. Exchange the code at /api/v1/oauth/token, then call /api/v1/oauth/userinfo.

Authorization / Token

No production FrameX secret is bundled with this project. Provision a client with bin/create-client.php and keep the secret in your server environment.

GET https://account.yanshiyi.com/oauth/authorize
POST https://account.yanshiyi.com/api/v1/oauth/token
GET https://account.yanshiyi.com/api/v1/oauth/userinfo
POST https://account.yanshiyi.com/api/v1/oauth/revoke
Full request examples and the client provisioning command are in README.md.

Internal login

Use the internal account API for service-to-service authentication, or connect FrameX through OAuth 2.0.

POST https://account.yanshiyi.com/api/v1/internal/login