Slack Auth & Security

OAuth 2.0 Flow

Bot Token vs User Token

Bot Token (xoxb-):

• Performs actions as the bot user
• Requires bot scopes
• Recommended for most operations

User Token (xoxp-):

• Acts on behalf of specific user
• Requires user scopes
• Used for user-specific operations

Basic OAuth Flow