Login Kit
Used to send the user through TikTok's authorization and consent flow and return the authorization result to the registered CommerceOS HTTPS callback.
Products and scopes requested
user.info.basic
Used only for the basic TikTok identity made available under this scope so CommerceOS can identify the authorized TikTok connection to the operator.
Content Posting API — Upload
Used to upload a draft to TikTok for the user to continue editing and posting from the TikTok inbox.
video.upload
Authorizes the draft-upload workflow. CommerceOS does not use this scope to silently publish a public post.
Not requested
Direct Post is not requested. CommerceOS does not request video.publish for this production application. The user remains responsible for reviewing and completing publication in TikTok.
End-to-end user flow
- An authorized CommerceOS brand operator chooses the TikTok connection/content workflow.
- CommerceOS starts TikTok Login Kit authorization for the configured scopes.
- TikTok shows its consent screen. The user chooses whether to authorize.
- TikTok returns the authorization code to the registered CommerceOS HTTPS callback.
- CommerceOS exchanges the code server-side and associates the authorized TikTok identity with the operator connection.
- The user selects a video in CommerceOS and explicitly chooses to upload it to TikTok.
- CommerceOS initializes the Content Posting API inbox upload and transfers the selected video to TikTok.
- The user receives the TikTok inbox notification and continues in TikTok to review, edit, and publish the draft.
TikTok Shop seller authorization
CommerceOS also integrates with TikTok Shop via a separate seller integration, which is not ordinary TikTok Login. Connect TikTok Shop (authorized sellers only).
Sandbox and review
Send a video to TikTok
The first-review demonstration uses TikTok's sandbox/target-user authorization flow and shows the same CommerceOS web domain and user interface where the production integration is intended to operate. Sandbox behavior is demonstration evidence; the production request remains limited to the two scopes listed above.
Data and security
Authorization codes and access/refresh tokens are handled server-side and are not exposed on this public website. CommerceOS does not ask users to provide their TikTok password. TikTok authorization is optional and users can deny or revoke access.
Support and deletion
For TikTok connection assistance, privacy questions, or eligible deletion requests concerning CommerceOS-held data, contact support@smatdesigns.com or review the Privacy Policy.