Implements secure OAuth 2.0 flows, token rotation, and request verification for Go-based Slack applications.
This skill provides domain-specific patterns and guidance for building enterprise-grade Slack integrations using the slack-go-sdk. It covers the complete authentication lifecycle, including generating authorization URLs, managing bot versus user tokens, and implementing multi-workspace storage strategies. By focusing on production security, the skill helps developers implement essential features like request signature verification, token encryption, and automated rotation, ensuring Slack apps remain secure and compliant with best practices.
主な機能
01Token rotation and multi-workspace storage patterns
021 GitHub stars
03OAuth 2.0 implementation for Bot and User tokens
04Granular scope and permission management guides
05Programmatic app configuration via Manifest API
06Secure request verification using Slack signing secrets
ユースケース
01Auditing and hardening Slack app permissions and security configurations
02Implementing production-ready webhook handlers with request signature verification
03Building multi-tenant Slack apps that require secure token storage for different teams
