VK API authorization cURL?

Question

PHP

I can get a token for my script by clicking on a link like this:
https://oauth.vk.com/authorize?client_id= <id>&scope=notify,friends,photos,offline,wall&redirect_uri=blank.html&display=popup&response_type=token
From of the window that opens, I copy the token and work with it.
Tell me, how can I remove the crutch with copying from the address bar of the token and get the token into the script directly?
Somewhere I met that in no way, they say VK checks from which domain the appeal is made and if it is not vk.com then it does not work, I hope this is not true))

Answer 1

Use Authorization code flow instead of Implicit flow
https://vk.com/dev/access_token

- Implicit flow. To work with the API on behalf of the user in Javascript applications and Standalone clients (desktop or mobile).
- Authorization code flow. To work with the API on behalf of the user from the server side of your site.

https://vk.com/dev/access_token?f=1.%20%D0%9A%D0%B...