TikTok OAuth Provider

[chimon2000]

Feature request

Create an OAuth provider for TikToke

TikTok recently published their OAuth flow
https://developers.tiktok.com/doc/login-kit-web

Is your feature request related to a problem? Please describe.

For the application that I am working on, we convert users from TikTok. Currently, we plan to authenticate them from using Phone authentication, but TikTok support could drastically improve our conversion.

Describe the solution you'd like

Social login with TikTok is supported similar to existing 3rd party providers.

Describe alternatives you've considered

The only other alternative would be to host our own authentication server and use it in tandem with Supabase. Not particularly ideal.

Additional context

n/a

[HarryET]

Was just looking into PRing this in but found that Login Kit doesn't provide email. So I'm not sure how it would work with the other providers all supporting emails. Might be something the supabase team needs to comment on.
https://developers.tiktok.com/doc/manage-user-access-tokens

[chimon2000]

I imagine this would be fine since Phone Number authentication does not provide an email, but probably good to get some feedback from the team.

cc @kiwicopple

[HarryET]

I imagine this would be fine since Phone Number authentication does not provide an email, but probably good to get some feedback from the team.

cc @kiwicopple

Yeah, the bigger issue is there is no contact info, just username and tiktok id

[kangmingtay]

Hey @HarryET, @chimon2000, we have actually stopped using the email from the oauth provider as the primary identifier for a user. The current list of providers still check if a new user / existing user has an email associated with their provider account but we haven't got to refactoring that bit yet. For the TikTok oauth provider implementation-wise, the response needs to contain the open_id field since that's TikTok's way of uniquely identifying a user.

[HarryET]

Hey @HarryET, @chimon2000, we have actually stopped using the email from the oauth provider as the primary identifier for a user. The current list of providers still check if a new user / existing user has an email associated with their provider account but we haven't got to refactoring that bit yet. For the TikTok oauth provider implementation-wise, the response needs to contain the open_id field since that's TikTok's way of uniquely identifying a user.

That's awesome! I'll try get a PR open today for TikTok

[J0]

Duplicate of #451