search

slackapi / python-slack-events-api

Slack Events API adapter for Python (Flask required)
https://api.slack.com/events
MIT License
343 stars 116 forks source link

Question: Could Slack provide IP range to restrict the request URL access from anonymous #92

Closed rcsrao closed 3 years ago

rcsrao commented 3 years ago

Question: Could Slack provide IP range to restrict the request URL access from anonymous

seratch commented 3 years ago

@rcsrao Unfortunately, the Slack server-side does not provide the information (actually static address range is not guaranteed).

restrict the request URL access from anonymous

To do this, we recommend validating x-slack-signature and so forth. As you may know, this library does that for you. https://api.slack.com/authentication/verifying-requests-from-slack

By the way, I'd recommend joining our Slack Developer Community workspace and asking this kind of question there. You will be able to get help from more people in the community.

As I've provided an answer to this question, let me close this issue now.