slapp/src/receiver/middleware/verify-token.js

A module for Slack App integrations

'use strict'

module.exports = (token, onError) => {
  return function verifyTokenMiddleware (req, res, next) {
    // If token isn't set, we're not verifying
    if (!token) {
      return next()
    }

    let message = req.slapp
    let verifyToken = message && message.meta && message.meta.verify_token

    // test verify token
    if (token !== verifyToken) {
      if (onError) {
        onError('Invalid verify token')
      }
      res.status(403).send('Invalid verify token')
      return
    }

    next()
  }
}