In short
Platforms create a hosted connect session for a profile, redirect the end user to Social Relay’s connect UI, and receive them back on success or cancel URLs while OAuth tokens remain encrypted on the Social Relay side.
Embedding raw OAuth for three networks multiplies app review, redirect URIs, and token storage risk for every platform team.
A connect session is scoped to one profile, accepts HTTPS success and cancel URLs, and can carry light branding such as primary color and logo URL.
Sandbox mode completes end-to-end without live Meta or LinkedIn apps so product teams can build publish flows before app review finishes.
Production OAuth uses the callback https://api.socialrelay.dev/api/v1/connect/oauth/callback when network apps are configured.