Technical overview
DeepCodeVN uses TikTok Login Kit for authorization and TikTok Content Posting API for user-confirmed upload or publish actions. This page documents the expected integration model for TikTok Developer App Review.
The user starts the flow from the DeepCodeVN dashboard and is redirected to TikTok for OAuth authorization. After TikTok returns the authorization response, DeepCodeVN validates the callback and stores only the token data required to operate the connected-account workflow.
The application never asks the user to enter a TikTok password into DeepCodeVN systems.
DeepCodeVN requests only scopes required for the creator workflow and TikTok-approved app configuration.
| Scope | Purpose | Workflow Use |
|---|---|---|
| user.info.basic | Identify the connected TikTok account | Display the account that will receive uploads or publishing requests |
| video.upload | Upload video as draft | Prepare creator content before final posting decisions |
| video.publish | Publish after confirmation | Submit a post only after the user confirms |
| user.info.profile | Optional profile context | Show profile details when needed for account verification |
| user.info.stats | Optional account stats context | Support creator dashboard status if approved and necessary |
The user uploads or selects a video, adds a caption and settings, previews the prepared post, and chooses whether to keep it as a draft or submit it to TikTok. The Content Posting API is called only for the user-selected content and only for the requested operation.
The dashboard presents the connected account, selected video, caption, privacy settings, and action summary before publishing. A user must click the final confirmation button. DeepCodeVN does not schedule hidden posts, run background publishing without user confirmation, or submit content without the user confirming the action.
Access tokens are handled securely on the server side and are used only for the connected user's requested workflow. User content and publishing records are retained only as needed to provide the workflow, maintain operational history, troubleshoot errors, or comply with legal and security requirements.
DeepCodeVN does not sell user data and does not use TikTok API data for unrelated advertising.
DeepCodeVN displays upload, authorization, and publishing errors in the dashboard so users understand whether a draft remains local, requires reconnection, or needs retry. Failed publish attempts are not silently repeated as completed actions.
The workflow is designed to respect TikTok API rate limits and platform responses. If rate limits or temporary API restrictions occur, DeepCodeVN reports the issue to the user and asks them to retry later rather than bypassing platform controls.
DeepCodeVN may record operational logs such as upload status, confirmation timestamp, connected-account reference, API error category, and publishing status. These logs support troubleshooting, user support, security review, and evidence that the user confirmed the action.
The final publishing step is always manual. The user sees the prepared post and clicks confirm. publishing without user confirmation without user consent is not part of the DeepCodeVN workflow.