verify-slack-request

Verify incoming HTTP requests from Slack

Usage

const SlackRequestVerifier = require('@vidglo/verify-slack-request');

const verifyIncomingRequest = SlackRequestVerifier({ slackSigningSecret: MY_SLACK_SIGNING_SECRET });

// Inside your route/lambda function
(req, res) => {
  const options = {
    // Expects body to be application/x-www-form-urlencoded
    body: req.body,
    // Expects headers to include 'X-Slack-Request-Timestamp' and 'X-Slack-Signature'
    headers: req.headers,
  }
  // Returns a promise
  verifyIncomingRequest(options)
    .then(arg => arg === options /* success! continue */)
    .catch(error => error.toString() === 'Error: Request does not match signing secret')
};