Canva Read-Only Connection Proof

Overview

Prove the smallest safe path first. A successful identity or profile read confirms connectivity and authorization shape but does not authorize design creation, export, assets, or other scopes.

Prerequisites

• Configured Canva integration and exact redirect URI
• Approved test user with the minimum identity/profile scope
• Backend secret storage and redacted evidence destination

Instructions

Step 1: Confirm backend boundary

Use Read and Grep to verify token exchange and storage stay server-side, the target base URL is exact, and no credential appears in client code.

Step 2: Select the read