Scopes

OAuth scopes allow you to specify exactly what access your app needs to perform its functions. In the previous example, we requested the bot scope, which gives our bots access to all the actions a bot user can perform. For example, the channels:history scope gives us access to the channel's chat history and users:read allows us to access the full list of users in the team. There is a long list of scopes available (which you can review at https://api.slack.com/docs/oauth-scopes), but we will focus on the three most likely to be used scopes in our apps:

  • bot: This provides a bot token, allowing us to connect to the team as a bot user
  • incoming-webhook: This provides an incoming webhook token
  • commands: This provides a Slack token, which we can ...

Get Building Slack Bots now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.