Skip to content
- Add-on id
kv_yandex_login, tables kv_yxl_*, namespace Tygh\Addons\KvYandexLogin.
- Generated from the Social Login Pro code base (
addons/social_login_pro/editions/build.py): same flow, provider list limited to Yandex ID.
- Verification: Yandex ID: authorization code flow with PKCE S256; the token request sends the code verifier; the profile comes from login.yandex.ru/info with the
Authorization: OAuth header. Yandex does not flag addresses as confirmed, so only a Yandex mailbox (yandex.ru, ya.ru, yandex.com and the other Yandex mail domains) counts as confirmed.
- Flow: state (single use, 15 minutes), browser-binding cookie, PKCE where the provider supports it, encrypted secrets (AES-256-CBC + HMAC with a key derived from the store’s crypt key).
- PHP hooks:
post_delete_user, update_profile; template hooks index:login_buttons, index:scripts, index:styles, profiles:account_update; no core changes.
- Full page cache: the button markup depends only on settings and keys (same for every visitor).
Edition::deferred(): true while kv_social_login_pro is active.
