Download the PHP package ak86/slash-command-request-validator-for-slack without Composer
On this page you can find all versions of the php package ak86/slash-command-request-validator-for-slack. It is possible to download/install these versions without Composer. Possible dependencies are resolved automatically.
Download ak86/slash-command-request-validator-for-slack
More information about ak86/slash-command-request-validator-for-slack
Files in ak86/slash-command-request-validator-for-slack
Package slash-command-request-validator-for-slack
Short Description A simple PHP package for validating the requests sent through a slack app slash commands.
License MIT
Informations about the package slash-command-request-validator-for-slack
Slash Command Request Validator for Slack Apps
A simple PHP package for validating the requests sent through a slack app slash commands. The package aims to address the HTTP endpoint requirements outlined as follows:
- Validates the HTTP request method to make sure it is a POST
- Validates X-Slack-Request-Timestamp header to mitigate replay attacks
- Validates the HTTP payload to make sure it is not empty
- Verifies the slack request signature
Please refer to below Slack documentation for the complete information on its endpoint requirements:
Requirements
- PHP 5.6 or higher
- Slack Signing Secret
Installation
You can install the package with Composer, by running the below command in your project root folder:
Make sure to add your Slack Signing Secret as an environment variable on your server where you run your script. The environment variable should be named SLACK_SIGNING_SECRET
. You can find your Slack Signing Secret in the Basic Information section of your Slack App's admin dashboard.
Basic Usage
In your app where slack slash command is configured to send its requests:
Optionally, you can set the number of seconds since the originating timestamp which is used to determine for how long the request can be considered as safe:
License
MIT