Third-party resource authorization

A system comprising:

• a processor configured to perform operations comprising:
• receiving, by a messaging application, a request to access a third-party resource;
• in response to receiving the request, obtaining a user interface data corresponding to the third-party resource;
• generating, for display on a client device, a graphical user interface of the third-party resource based on a markup-language document;
• generating for display a menu with an option to authorize the third-party resource to access user data from the messaging application;
• and
• authorizing the third-party resource to access the user data from the messaging application in response to a user interaction with the menu.

A non-transitory machine-readable storage medium that includes instructions that, when executed by one or more processors of a machine, cause the machine to perform operations comprising:

• receiving, by a messaging application, a request to access a third-party resource;
• in response to receiving the request, obtaining a user interface data corresponding to the third-party resource;
• generating, for display on a client device, a graphical user interface of the third-party resource based on a markup-language document;
• generating for display a menu with an option to authorize the third-party resource to access user data from the messaging application;
• and
• authorizing the third-party resource to access the user data from the messaging application in response to a user interaction with the menu.