Building Slack Bots

Understanding the OAuth process

In order to implement a bot user in a team that is not our own, we require a bot token similar to the ones we created earlier for our own team. We can request this token, but first we must prove that we are who we say we are using the OAuth process. OAuth (Open Authentication) is an open standard for authentication used by many companies, large and small.

The authentication process works through the following steps:

1. The user clicks the Add to Slack button.
2. Slack sends a request to the redirect URI provided in our app's settings page.
3. Once the request is received on our server, we redirect it to the authorization API endpoint (https://slack.com/oauth/authorize) and include the following parameters in the query string: ...