TikTok api

.env.example

@@ -24,3 +24,13 @@ SMTP_PASS=
 
 # Cron job protection — generate with: openssl rand -base64 32
 CRON_SECRET=
+
+# TikTok OAuth / posting (server-side only)
+# Source of truth for cron posting: QRMaster server .env
+# Production example: https://qrmaster.net/api/tiktok/callback
+# Local dev example: http://localhost:3000/api/tiktok/callback
+# Tokens are saved in the DB after the OAuth callback; do not store access tokens here.
+TIKTOK_CLIENT_KEY=aw2l7czcin3uk426
+TIKTOK_CLIENT_SECRET=LapujWkqpZfj1jgWBeCzFhw2nuhMPMBA
+TIKTOK_REDIRECT_URI=https://qrmaster.net/api/tiktok/callback
+TIKTOK_ADMIN_KEY=yV0CzlXyw00kFc7hnnJZv_eoH5WaqGsD5l8_GH7Aj2s