Current production integration boundary
The current supported TikTok workflow is draft upload through TikTok's Content Posting API. YennayApps sends approved content to the authorised creator's TikTok draft workflow. The creator then completes editing and posting inside TikTok.
A successful draft delivery is not a successful public TikTok publication. Direct Post is not currently enabled and would require a separate product decision, TikTok permission and approval process.
Reviewer credentials, environment-specific access instructions and any non-public test information are supplied privately through TikTok's review channel where required. No private credentials are published on this public site.
Product and application locations
The private operator application is authenticated. It is the operational workspace used by authorised operators, not the public product website.
The TikTok OAuth callback is https://publisher.yennayapps.com/api/publishing/tiktok/oauth/callback. Client secrets, OAuth tokens and internal account identifiers are not exposed here.
Requested TikTok permissions
user.info.basicUsed for basic TikTok account identity, including the open ID and basic profile information returned with the authorised account.
user.info.profileUsed to retrieve the authorised TikTok username/profile identity so YennayApps can verify that the operator connected the intended configured destination.
video.uploadUsed to send approved media to the authorised creator's TikTok draft workflow for further editing and posting in TikTok.
The production review request should include only permissions actually required and demonstrated by this draft-upload workflow.
End-to-end reviewer flow
- 1
Open the operator applicationReviewer or operator opens publisher.yennayapps.com.
- 2
Sign inOperator signs in using authorised credentials supplied privately where review access is required.
- 3
Open Publishing > ConnectionsOperator opens the connected-account management area.
- 4
Select a configured TikTok destinationOperator selects the TikTok destination they are authorised to manage.
- 5
Choose Connect or ReconnectThe application starts the TikTok connection flow for that configured destination.
- 6
TikTok OAuth opensThe operator is redirected to TikTok's authorisation experience.
- 7
Authorise the intended TikTok accountThe operator grants the requested production permissions to the correct TikTok account.
- 8
Verify authorised account identityThe application displays returned account identity so the operator can confirm the intended destination was connected.
- 9
Review prepared contentThe operator opens the prepared item intended for TikTok.
- 10
Select the correct TikTok destinationThe operator confirms the configured TikTok account for this output.
- 11
Generate or review the TikTok outputThe platform-specific output is prepared for operator review.
- 12
Review media and captionThe operator checks the final media and caption before submission.
- 13
Send as a TikTok draftThe operator explicitly initiates the approved draft upload through TikTok's Content Posting API.
- 14
Open the TikTok creator workflowTikTok delivers the uploaded content to the creator workflow or inbox.
- 15
Complete the post in TikTokThe creator completes editing/posting inside TikTok. This is the step that turns the draft into a TikTok post.
Connected-account and data controls
- Connected TikTok accounts are shown under Publishing > Connections in the authenticated operator application.
- An authorised operator can disconnect the stored TikTok connection from that area.
- After disconnection, reconnecting requires the TikTok OAuth flow again.
- A TikTok user can also revoke YennayApps access using TikTok's own application/account controls where available.
- Requests to delete YennayApps-held account-related data follow the public deletion and support guidance.
Reviewer checklist
- Public product page is accessible without login.
- Privacy Policy is accessible without login.
- Terms of Service are accessible without login.
- Support guidance is accessible without login.
- TikTok OAuth connection flow can be reproduced using the private review access supplied through TikTok's review channel.
- The authorised TikTok account identity can be verified after authorisation.
- Disconnect and reconnect behavior can be reviewed in the authenticated operator application.
- The operator can reproduce the explicit TikTok draft-upload workflow described above.
- The creator completes editing/posting inside TikTok; the public site does not claim Direct Post authority.
- No passwords, tokens, client secrets or reviewer credentials are published publicly.
- Public pages remain usable on desktop and mobile.
URL verification readiness
The public site is static and can serve a TikTok-provided verification artifact from the exact public path required by TikTok. No verification token or signature is invented by YennayApps.
If TikTok supplies a verification file or value, it must be added exactly as provided, validated over HTTPS, and only then used in the Developer Portal verification step.
Reviewer links