一年后，我自己设法做到了。
TL;DR：如果你想访问 Yahoo Fantasy API，只需使用我创建的这个 NodeJS 工具：https://github.com/edwarddistel/yahoo-fantasy-baseball-reader
如果您想在 NodeJS 或 PHP 中创建自己的应用程序，方法如下：
转到https://developer.yahoo.com/apps/create/，获取Consumer Key 和Consumer Secret
将Consumer Key放入https://api.login.yahoo.com/oauth2/request_auth?client_id=YOUR-CONSUMER-KEY-GOES-HERE&redirect_uri=oob&response_type=code&language=en-us并同意允许访问，然后获取授权码
构造Auth标头，CONSUMER_KEY:CONSUMER_SECRET的Base64编码：
const AUTH_HEADER = Buffer.from(`${CONSUMER_KEY}:${CONSUMER_SECRET}`, `binary`).toString(`base64`);
Yahoo 需要 x-www-form-urlencoded，因此如果使用像 Axios 这样的 HTTP 请求库，您需要按照 docs 对数据进行字符串化
向 Yahoo 发出请求。这是一个例子：
function getInitialAuthorization () {
return axios({
url: `https://api.login.yahoo.com/oauth2/get_token`,
method: 'post',
headers: {
'Authorization': `Basic ${AUTH_HEADER}`,
'Content-Type': 'application/x-www-form-urlencoded',
'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36',
},
data: qs.stringify({
client_id: CONSUMER_KEY,
client_secret: CONSUMER_SECRET,
redirect_uri: 'oob',
code: YAHOO_AUTH_CODE,
grant_type: 'authorization_code'
}),
timeout: 1000,
}).catch((err) => {
console.error(`Error in getInitialAuthorization(): ${err}`);
});
}
获取该响应并将其写入文件。您需要这些凭据才能每使用 60 分钟重新授权应用一次。
向 Yahoo API 发出正常的 HTTP 请求。检查响应，如果授权令牌已过期，请使用稍微不同的一组参数重新授权：
function refreshAuthorizationToken (token) {
return axios({
url: `https://api.login.yahoo.com/oauth2/get_token`,
method: 'post',
headers: {
'Authorization': `Basic ${AUTH_HEADER}`,
'Content-Type': 'application/x-www-form-urlencoded',
'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36',
},
data: qs.stringify({
redirect_uri: 'oob',
grant_type: 'refresh_token',
refresh_token: token
}),
timeout: 10000,
}).catch((err) => {
console.error(`Error in refreshAuthorizationToken(): ${err}`);
});
}
- 发出 API 请求并检查授权的示例：
// Hit the Yahoo Fantasy API
async function makeAPIrequest (url) {
let response;
try {
response = await axios({
url: url,
method: 'get',
headers: {
'Authorization': `Bearer ${CREDENTIALS.access_token}`,
'Content-Type': 'application/x-www-form-urlencoded',
'User-Agent': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36',
},
timeout: 10000,
});
const jsonData = JSON.parse(parser.toJson(response.data));
return jsonData;
} catch (err) {
if (err.response.data && err.response.data.error && err.response.data.error.description && err.response.data.error.description.includes("token_expired")) {
const newToken = await refreshAuthorizationToken(CREDENTIALS.refresh_token);
if (newToken && newToken.data && newToken.data.access_token) {
CREDENTIALS = newToken.data;
// Just a wrapper for fs.writeFile
writeToFile(JSON.stringify(newToken.data), AUTH_FILE, 'w');
return makeAPIrequest(url, newToken.data.access_token, newToken.data.refresh_token);
}
} else {
console.error(`Error with credentials in makeAPIrequest()/refreshAuthorizationToken(): ${err}`);
process.exit();
}
}
}
这是一个 PHP 示例：
function getInitialAuthorizationToken() {
$ch = curl_init();
$post_values = [
"client_id" => $GLOBALS['consumer_key'],
"client_secret" => $GLOBALS['consumer_secret'],
"redirect_uri" => "oob",
"code" => $GLOBALS['initial_auth_code'],
"grant_type" => "authorization_code"
];
curl_setopt_array($ch, array(
CURLOPT_RETURNTRANSFER => 1,
CURLOPT_URL => $GLOBALS['auth_endpoint'],
CURLOPT_POST => 1,
CURLOPT_HTTPHEADER => array(
'Authorization: Basic ' . $GLOBALS['auth_header'],
'Content-Type: application/x-www-form-urlencoded',
'User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/72.0.3626.109 Safari/537.36'),
CURLOPT_POSTFIELDS => http_build_query($post_values)
));
$answer = curl_exec($ch);
if (isset($answer)) writeToFile($answer);
if (!isset($access_token)) {
echo "Error!";
die;
}
else {
return $token;
}
}
希望这对其他人有所帮助。