LearnersGuild / echo

learning management system
MIT License
3 stars 31 forks source link

fix Slack integration WRT bot user, permissions, etc. #994

Open jeffreywescott opened 7 years ago

jeffreywescott commented 7 years ago

From ch2141

Right now, I've hacked the Slack integration by using a legacy token associated with a real IDM user (echo-bot) that is set with Admin privileges. This is necessary because Slack bot users don't have access to the full set of capabilities we need.

To fix this, we need to have each learner authorize our app via an OAuth2 flow with scopes. It will be a big pain in the ass. We need to fix it, though, because there's no guarantee that legacy tokens will work indefinitely.

hack #hack #hack :-(

jeffreywescott commented 7 years ago

[Comment from Clubhouse user @jeffreywescott:] @prattsj: move to P4 GH?