Technical Details for Reviewers

• Website: https://web.thesoph.ai • Redirect URI: https://web.thesoph.ai/oauth/callback
• Products: Login Kit, Content Posting API, Display API
• Scopes: user.info.basic,video.upload,video.publish,user.info.profile,user.info.stats,video.list
• Creator Info (Posting): POST /v2/post/publish/creator_info/query/
• Publish Init (PULL_FROM_URL): POST /v2/post/publish/video/init/
• User Info (Display): GET /v2/user/info?fields=…
• Video List (Display): POST /v2/video/list/ with max_count, cursor, fields
• Media URL (same domain): https://web.thesoph.ai/media/test.mp4
• Webhooks: POST https://web.thesoph.ai/webhooks/tiktok — used to record basic delivery events and improve reliability.
• Webhook callback: https://web.thesoph.ai/webhooks/tiktok (HMAC SHA-256 signature verification).

Tokens are stored server-side (KV) keyed to a session cookie. See Privacy & Data Deletion pages.