The library implements two types of Login:
-
Interactive
-
Headless
In the Interactive mode, the browser opens on the address of the Slack workspace, and user needs to follow the usual authentication flow, it could be a Email/Password, SSO, Google, etc.
Call the slackauth.Browser function to start the Interactive login. It will
block until the timeout expires or the user does something, i.e. logs in or
closes the page/browser.
The library detects if the user closes the tab with Slack website or the browser, in this case the function returns an error. It doesn’t track the website that user is on, so user can navigate away and browse the web, if they decide so, until the timeout destroys the browser.
func browserLogin(ctx context.Context) {
const workspace = "some workspace"
ctx, cancel := context.WithTimeoutCause(ctx, 180*time.Second, errors.New("user too slow"))
defer cancel()
token, cookies, err := slackauth.Browser(ctx, workspace, slackauth.WithNoConsentPrompt())
if err != nil {
log.Fatal(err)
}
fmt.Println(token)
fmt.Println(cookies)
}In the Headless mode, the browser is not visible to the user, and the authentication flow is automated. The user needs to provide the workspace, email and password, and the library will do the rest.
Call the slackauth.Headless function to start the Headless login. It will
block until login succeeds or fails.
There’s a special case when Slack does not recognise the browser and asks the
user to enter the confirmation code that was sent on the user’s email. In
this case, Headless calls the provided interactive challenge function (see the
WithChallengeFunc option) and waits for the user to enter the code. After
the user enters the code, it will be passed to the page and the login process
will continue.
There’s the fallback challenge function, but it’s simple and ugly, so you’re encouraged to provide your own beautiful one.
Overall, headless login looks nicer, but more fragile - it will start failing should Slack decide to change the login elements.
func autoLogin(ctx context.Context) {
ctx, cancel := context.WithTimeoutCause(ctx, 180*time.Second, errors.New("user too slow"))
defer cancel()
workspace := envOrScan("AUTH_WORKSPACE", "Enter workspace: ")
username := envOrScan("EMAIL", "Enter email: ")
password := envOrScan("PASSWORD", "Enter password: ")
token, cookies, err := slackauth.Headless(ctx, workspace, username, password, slackauth.WithDebug(), slackauth.WithNoConsentPrompt())
if err != nil {
log.Fatal(err)
}
fmt.Println(token)
fmt.Println(cookies)
}
func envOrScan(env, prompt string) string {
v := os.Getenv(env)
if v != "" {
return v
}
for v == "" {
fmt.Print(prompt)
fmt.Scanln(&v)
}
return v
}