Skip to content

Token rotation in Bolt - What needs to be done? #1395

@RomainCscn

Description

@RomainCscn

Description

Hello! For now, I'm using @slack/oauth to handle my OAuth installation (because the callback to persist data is unavailable in bolt see #1211).

I'm planning to migrate my installation workflow over to @slack/bolt soon (as soon as v3.11 is released) and will take the opportunity to use token rotation.

In the documentation, it is said that:

Bolt for JavaScript supports and will handle token rotation automatically so long as the built-in OAuth functionality is used.

Does this mean that there is nothing to be done to handle token rotation? If I use OAuth with bolt with the various methods (storeInstallation, fetchInstallation), the token will be updated automatically?

Does this use events? I think I'm missing something here.

Furthermore, I can't find any documentation on token rotation for @slack/oauth, is it not handled by this package?

Thanks in advance!

What type of issue is this? (place an x in one of the [ ])

  • bug
  • enhancement (feature request)
  • question
  • documentation related
  • example code related
  • testing related
  • discussion

Requirements (place an x in each of the [ ])

  • I've read and understood the Contributing guidelines and have done my best effort to follow them.
  • I've read and agree to the Code of Conduct.
  • I've searched for any related issues and avoided creating a duplicate issue.

Metadata

Metadata

Assignees

No one assigned

    Labels

    questionM-T: User needs support to use the project

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions