> For the complete documentation index, see [llms.txt](https://docs.tiny.plus/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.tiny.plus/api/getting-access/oauth-authorisation-process.md).

# oAuth Authorisation process

## Create the oAuth request

In your app, provide a Login button that makes a request, as follows.

## oAuth Authorisation

<mark style="color:blue;">`GET`</mark> `https://api.tiny.plus/oauth/authorize`

This will present a login screen and a permission screen to the user.

#### Query Parameters

| Name           | Type   | Description                                                                                                                                      |
| -------------- | ------ | ------------------------------------------------------------------------------------------------------------------------------------------------ |
| response\_type | string | Set this to `token`.                                                                                                                             |
| client\_id     | string | Your app's `client_id`, provided by tiny+.                                                                                                       |
| redirect\_uri  | string | Provide the full URI for redirection at the conclusion of the auth flow.                                                                         |
| scope          | string | Set this to `read` or `readwrite`, depending on your requirements.                                                                               |
| state          | string | Provide a CSRF token that we will provide back to you at the end of the auth flow. This helps protect your users from man in the middle attacks. |

{% tabs %}
{% tab title="200 " %}

```
https://[yoururl]?token_type=Bearer&expires_in=[TTL]&access_token=[your access token]&state=[your provided CSRF token]
```

{% endtab %}
{% endtabs %}