Slack OAuth v2 authentication strategy for Passport
npm install @kehers/passport-slackPassport strategy for authenticating with the Slack OAuth v2 API. This lets you use the v2 OAuth endpoints, set granular scopes (both user_scope and scope) and get user profile.
```
$ npm install --save passport @kehers/passport-slack
Create a Slack App to get a *Client ID and Client Secret*. Ensure you selected the right bot and user scopes for your app’s needs. The Strategy uses https://slack.com/api/users.identity to retrieve user’s profile by default and this requires the identity:basic user scope.
Supply your Slack Client ID and Client Secret as options to the strategy. The strategy also requires a verify callback, which receives an accessverify
token from the grant, data response from Slack and user profile. The callback must call done providing the value youreq.user
want to assign to in authenticated requests.
`javascriptdone()
passport.use(new SlackStrategy({
clientID: process.env.SLACK_CLIENT_ID,
clientSecret: process.env.SLACK_CLIENT_SECRET,
callbackURL: process.env.SLACK_CALLBACK
}, (accessToken, response, profile, done) => {
// Create your desired user model and then call `
User.findOrCreate({ user_id: profile.user.id }, function (err, user) {
return done(err, user)
})
}))
Use passport.authenticate(), specifying the ‘slack’ strategy, to authenticate requests.
For example, as route middleware in an Express application:
`javascript
// Visiting this route when not already authenticated with slack will redirect the user to slack.com
// and ask the user to authorize your application
app.get('/auth', passport.authenticate('slack'))
// The user returns to the your site after the authorization above, and if it was successful
// the next route handler runs, otherwise the user is redirected to chosen failureRedirect.
app.get('/auth/callback',
passport.authenticate('slack', { failureRedirect: '/login' }),
function(req, res) {
// Successful authentication, redirect home.
res.redirect('/')
});
`
You can pass in necessary scope and user_scopes depending on permissions required by your application.
`javascript`
app.get('/auth', passport.authenticate('slack', {
user_scope: ['users:read'],
scope: ['team:read', 'chat:write', 'chat:write.customize', 'chat:write.public', 'commands', 'channels:read', 'im:history']
}))
See the example` directory for a simple implementation.
Looking for a shared inbox and helpdesk built on Slack? See sharedbox.app