Toutiao Open API (OAuth + User Profile)
Toutiao account OAuth 2.0 and user-profile API, served from the open.snssdk.com host and documented on the Douyin Open Platform under the toutiao-or-xigua permission section. Supports the authorization-code flow (authorize, access_token, refresh_token, renew_refresh_token) and returns the authorized user's open_id, nickname and avatar; the mobile_alert permission additionally returns an AES-encrypted phone number. Scopes are namespaced toutiao.* and are granted per-application in the open-platform console. Access tokens are valid 15 days, refresh tokens 30 days. No OpenAPI is published for this surface.