Vkontakte, wall.post - error_code 15, Access denied. What's wrong?

Question

PHP

I'm trying to add the ability to send posts to the user's wall via hybridauth . The idea is simple - the user logs in and a post is published on his wall.
I request application rights, I get the following set: friends, photos, status, wall, offline, groups.
I make a request to add a record, the answer is the following:

(
    [error] => stdClass Object
        (
            [error_code] => 15
            [error_msg] => Access denied
            [request_params] => Array
                (
                    [0] => stdClass Object
                        (
                            [key] => oauth
                            [value] => 1
                        )

                    [1] => stdClass Object
                        (
                            [key] => method
                            [value] => wall.post
                        )

                    [2] => stdClass Object
                        (
                            [key] => uid
                            [value] => уид
                        )

                    [3] => stdClass Object
                        (
                            [key] => message
                            [value] => I feel free to spam my friends with all kinds of marketing bullshit.
                        )

                    [4] => stdClass Object
                        (
                            [key] => access_token
                            [value] => токен
                        )
                )
        )
)

Interestingly, the documentation says:

wall Access to normal and advanced wall methods.
Attention, this access right is not available for sites (it is ignored when trying to authorize).

However, this is not written about status , and it cannot be updated with exactly the same error.
The application is launched as a Standalone Application, the error does not change with the Website.
What am I doing wrong? All request parameters are visible in the response, but if necessary, I will put stunnel and get the full url.

Answer 1

Isn't this method only for standalone applications?

Answer 2

It turned out the following. If the redirect_uri is set to https://api.vk.com/blank.html , the token allows you to publish posts. And if in your domain, then no. It's not very clear what to do with it.

Answer 3

They say that this token is eternal if "offline" is passed to scope. You get it manually and save it.
Tested on standalone application and type group - group. Works.
On a web application and a group with the page type - Does not work.