# oAuth Authorisation process

## Create the oAuth request

In your app, provide a Login button that makes a request, as follows.

## oAuth Authorisation

<mark style="color:blue;">`GET`</mark> `https://api.tiny.plus/oauth/authorize`

This will present a login screen and a permission screen to the user.

#### Query Parameters

| Name           | Type   | Description                                                                                                                                      |
| -------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| response\_type | string | Set this to `token`.                                                                                                                             |
| client\_id     | string | Your app's `client_id`, provided by tiny+.                                                                                                       |
| redirect\_uri  | string | Provide the full URI for redirection at the conclusion of the auth flow.                                                                         |
| scope          | string | Set this to `read` or `readwrite`, depending on your requirements.                                                                               |
| state          | string | Provide a CSRF token that we will provide back to you at the end of the auth flow. This helps protect your users from man in the middle attacks. |

{% tabs %}
{% tab title="200 " %}

```
https://[yoururl]?token_type=Bearer&expires_in=[TTL]&access_token=[your access token]&state=[your provided CSRF token]
```

{% endtab %}
{% endtabs %}


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.tiny.plus/api/getting-access/oauth-authorisation-process.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.