can then invite anyone he wants to be a member of his Slack instance.Ĭhannels in Slack can be public, meaning any member can see and join that channel, or private, meaning only members of that channel can see it or invite others to join. Coyote wants to create a Slack instance for ACME Slingshots, his Slack instance would be. This then becomes part of the unique URL. If the nonce does not exist, the app returns a 404.When a customer wants to start using Slack, they choose a name for their Slack instance. If the nonce exists, it'll chat.postMessage to send the JSON payload or the URL-encoded form from the incoming request through to Slack.
When the app receives a POST request to its incoming webhook endpoint, it'll extract the nonce from the URL and use that to find the associated channel in the database. A user sends a message to the webhook URL
We send the channel's webhook URL into the channel using the chat.postMessage method.
By using a nonce, the app ensure that the URL can't be reverse engineered to allow users to post into channels they aren't part of. Send the webhook URL to the channelīy joining a common base URL with the nonce, the app is able to create a unique URL for the channel. If the channel ID isn't found, the app will generate a nonce and save it in the datastore alongside the channel ID. If it does, the bot has previously joined the channel and there is already a webhook URL for it. When the app receives a member_joined_channel for its bot, it'll take the channel_id from the event and checks whether it exists in its datastore. Since this user ID won't change, the app can safely cache it. To get the bot's user ID, the app calls the auth.test method using the bot API token ( xoxb-) and extracts the user_id. Since we're only interested in the events that are related to the app's bot joining a channel, the app can ignore all events where the user_id of the member_joined_channel event doesn't match the bot's user ID. The event will include information about the member and the channel they joined. In the case of member_joined_channel event, Slack will send an event when a member joins a public or private channel the bot is part of or being invited to. The Events API sends a POST request to a URL you've provided whenever certain events occur on your Slack team. To find out when a user or bot joins a channel you'll need to subscribe to the member_joined_channel event being sent out through the Events API. This allows people in a channel to quickly set up their own incoming webhooks without having to create a Slack app.
A bot that generates a unique webhook URL for every channel that it is invited to.
0 kommentar(er)
