At a time when businesses are increasingly relying on Slack for day-to-day operations, the Slack App Directory is thriving. These days, there are Slack apps for everything: from to , to , to . There has never been a better time to be a Slack user. polls team recognition daily standups promoting inclusive language Likewise, there has never been a better time to create a Slack app! But it’s not all sunshine and roses. I’ve been through the Slack app process twice, first with and now with . Building a Slack app is fun and Slack is always improving the . But, there are a few gotchas that have cost me a lot of time during the review process. UPPIT AllyBot developer experience Here are 5 reasons why Slack will reject your bot, and what you can do about it. 1. Security Do yourself a favor and use . This one might be obvious, but it certainly wasn’t to me when I built . Don’t get me wrong, you can build a basic Slack app with the Slack web API and your backend framework of choice; this is what I did with UPPIT. bolt.js UPPIT But when you go to submit your app to the Slack App Directory, you will soon realize there are a bunch of security things you probably didn’t consider. OAuth and token management, and and the ones I’ve failed with in the past. verifying requests from Slack Both these topics deserve an article, but the takeaway is that bolt.js handles a lot of this stuff for you. It provides sensible interfaces and callbacks for the things you need to customize. It also provides simple wrappers for the Slack web API out of the box. bolt.js an obvious choice that allows you to focus on building your app. I estimate 20% of the time I spent on UPPIT was on these auxiliary tasks, whereas when I used bolt.js for , it was more like 5%. AllyBot Don’t reinvent the wheel - use bolt.js! 2. No customer support or poor branding When you’re in the trenches building your app, it’s easy to forget that you need to market the thing! Slack requires a bunch of items on this front. Let’s go through some of the ways you can succeed on this front. Privacy policy and Terms of Service Slack will not accept your app without a link to a Privacy Policy and a Terms of Service. It’s best to seek legal advice, but you can also get pretty far by using existing Slack apps as inspiration. Support email address and contact form You need an email address for support and a support page on your website. For email, I use . It’s free, and I’ve set up tom@allybot.io, and a “catch-all” alias that points to tom@allybot.io. This means I can list my app’s support contact as something like support@allybot.io and I’ll receive any emails sent there at tom@allybot.io. Zoho For the support page, a simple contact form does the job - check out for an example (built with ). https://allybot.io/#support https://carrd.co Add to Slack button Make sure your website has an Add to Slack button. If you’re using bolt.js, link this button to https://<your-app.com>/slack/install. Redirect the user to an “Install Successful” page once they’ve successfully installed your app (Slack requires this). Branding Slack has a bunch of on this topic, but the bottom line is this: keep your branding consistent and don’t conflict with Slack’s branding. Simple! resources Utilizing the App Home in Slack can be confusing, but this is a must-do. Slack has a on this, but here are some essentials. whole article Send the user who installed your app an intro message When a user installs your app, you need to send them a message that explains to them how to get started. Here is ’s welcome message: AllyBot AllyBot’s installed welcome message Of course, make sure you only send this once. 3. Respond to app_home_opened event When a user other than the user that installed your app opens your apps App Home tab, you need to greet them as well! Again, this should only be a once-off. I have a flag for app_home_opened in the user table of the database, set to false. When the user first opens the App Home tab, this flag flips to true so I know never to send the message to the user again. The message can be like the first one, for example, this is how responds to app_home_opened: AllyBot.io AllyBot’s user welcome message Note that you will need to request the scope to start chats with users. im:write 4. Not giving good reasons for your requested OAuth scopes This is a common reason Slack apps get held up in the review process. You should take the time to consider if your app needs all the scopes you are requesting. Slack will reject anything that seems like a “nice to have”. Give genuine reasons about why you need a certain scope. And be transparent. If you are capturing user emails (with the scope), then say so. users:read.email The same applies to your data retention policies. Don’t simply say “We will retain your data as per our privacy policy”. Give a short, clear and concise description about how you plan to handle your user’s data. Something like “When you ask us to delete your data, we will respond to you via email by 24 hours. We will aim to fulfill your data removal request with 24 hours of responding, and will inform you when your data has been removed. For more information, see our Privacy Policy”. 5. Poor error handling During the review process, Slack will try and break your app. But don’t see this as a negative; we should be super grateful to get free QA testing (thanks Slack)! Using bolt.js will help you here. But, if your Slack app uses slash commands, or “actions” (buttons, etc.), think carefully about where your app could fail. Make sure to send the user a message when errors occur. An message is a good way to do this; an inline, private message to the user interacting with your app. Something as simple as “Oops, something went wrong 😢” is a good start, but always try to . “ephemeral” give direction to the user Ask me anything Have I missed something? Need something clarified? Hit me up on Twitter . @tom__quirk Previously published at https://tallordertech.co/p/5-reasons-why-slack-will-reject-your-slack-app/

BUNCH

Slack

Super

Twitter

A No Bullshit Tutorial on Creating a Slack bot with Node.js

RuntimeHQ Blog

Read My Stories

Too Long; Didn't Read

Boost your HackerNoon story @ $159.99! 🚀

Slack Will Reject Your App: 5 Reasons From Someone Who's Been Through The Process, TWICE

About Author

Comments

TOPICS

THIS ARTICLE WAS FEATURED IN

Related Stories

Untitled Story

A No Bullshit Tutorial on Creating a Slack bot with Node.js

10 Reasons Why Less Is More in Your init/deinit Methods

10 Best Practices for Every React Developer

10 Best Practices for Using Kubernetes Network Policies

12 Essential Coding Standards for Quality Web Development

A No Bullshit Tutorial on Creating a Slack bot with Node.js

10 Reasons Why Less Is More in Your init/deinit Methods

10 Best Practices for Every React Developer

10 Best Practices for Using Kubernetes Network Policies

12 Essential Coding Standards for Quality Web Development

Light-Mode

Classic

Newspaper

Dark-Mode

Neon Noir

Minty

HN StartUps