refactor(standardized-auth): mirror the python sample over socket mode

Match slack-samples/bolt-python-examples#305: run over Socket Mode, keep
connections in a local properties file, handle the user_connection event
and the fixed auth_provider_connect and auth_provider_disconnect action
IDs, and answer user_connection_status_requested. The OAuth flow,
installation service, tokens_revoked, and token revocation are gone.

The SDK has no user_connection event model yet, so the sample defines
UserConnectionEvent with a null default subtype to match Bolt's routing key.

Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>

Author: WilliamBergamin

standardized-auth/.env.example

@@ -2,6 +2,5 @@
 .project
 .settings
 target
-data/
 .env*
-!.env.example
+acme.properties

standardized-auth/.gitignore

@@ -6,26 +6,22 @@ Read the docs: https://docs.slack.dev/authentication/standardized-auth
 
 ## How it works
 
-Acme keeps every connection in Bolt's installation service: a user is connected when it holds their user token.
+Acme runs over Socket Mode and keeps every connection in a local properties file ([`Connections.java`](./src/main/java/acme/Connections.java)): a user is connected when their Slack user ID is in it. The provider object and the App Home view live in [`Acme.java`](./src/main/java/acme/Acme.java), and every listener and Slack API call lives in [`Main.java`](./src/main/java/acme/Main.java).
 
-- **Connect** opens `/slack/install`. When the OAuth flow saves the user's token, the app reports the connection with `apps.user.connection.requestAuth` and refreshes App Home.
-- **Disconnect** forgets the user's token, reports the user as disconnected, then revokes the token.
+- **Connect** connects the Slack user who clicked it, with their user ID as the connected identity. It reports the connection with `apps.user.connection.requestAuth` and refreshes App Home.
+- **Connect** or **Manage** on the app's profile sends the `user_connection` event, and Acme answers within 3 seconds by opening the connection modal with `apps.user.connection.requestAuth` and the event's `trigger_id`.
+- **Disconnect** forgets the connection and reports the user as disconnected.
 - **`user_connection_status_requested`** answers with `apps.user.connection.update` whenever Slack asks about a user it doesn't know yet.
-- **`tokens_revoked`** forgets users who remove Acme from their Slack settings and reports them as disconnected.
 - **App Home** shows an `auth_provider` block with the user's current connection.
 
+Connecting in one click stands in for your service's real login. Slack requires at least one host in the manifest's `features.user_connections.auth_hosts`, so `example.com` holds the place until you have one. To sign users in to your own service, set `auth_url` on the provider to your OAuth or SSO page, replace `example.com` with its host, and carry the Slack user through the browser in a signed `state` so a connection always lands on the user who clicked **Connect**.
+
 ## Setup
 
+Everything arrives over Socket Mode, so the app needs no public URL. The manifest subscribes to the `user_connection` and `user_connection_status_requested` events, which every app with `features.user_connections` needs. Use a Slack CLI newer than v4.10.0: older versions don't send `features.user_connections` with the manifest.
+
 ```sh
-$ ngrok http 3000  # Replace 1234-56-78-90-0.ngrok-free.app in manifest.json
-$ slack install --environment local  # Create a new app
-$ slack app settings  # Gather the client ID, client secret, and signing secret
-$ slack env init  # Update defaults with them and your ngrok URL
-$ slack manifest  # Validate fields
 $ slack run
-$ open https://1234-56-78-90-0.ngrok-free.app/slack/install  # Install the app
 ```
 
 Then open the app's **Home** tab and click **Connect**.
-
-Swap the `users:read` and `users.profile:read` scopes for the ones your connection needs.

standardized-auth/README.md

@@ -1,45 +1,39 @@
 {
   "display_information": {
     "name": "Acme",
-    "description": "Rocket skates, anvils, and giant magnets for every plan",
-    "background_color": "#4A154B"
+    "description": "Rocket skates, anvils, and giant magnets for every plan"
   },
   "features": {
     "app_home": {
-      "home_tab_enabled": true,
-      "messages_tab_enabled": false
+      "home_tab_enabled": true
     },
     "bot_user": {
       "display_name": "Acme",
       "always_online": true
     },
     "user_connections": {
       "is_enabled": true,
-      "auth_hosts": ["1234-56-78-90-0.ngrok-free.app"]
+      "auth_hosts": ["example.com"]
     }
   },
   "oauth_config": {
-    "redirect_urls": ["https://1234-56-78-90-0.ngrok-free.app/slack/oauth_redirect"],
     "scopes": {
-      "bot": ["users:read"],
-      "user": ["users.profile:read"]
+      "bot": ["users:read"]
     }
   },
   "settings": {
     "event_subscriptions": {
-      "request_url": "https://1234-56-78-90-0.ngrok-free.app/slack/events",
       "bot_events": [
         "app_home_opened",
-        "tokens_revoked",
+        "user_connection",
         "user_connection_status_requested"
       ]
     },
     "interactivity": {
-      "is_enabled": true,
-      "request_url": "https://1234-56-78-90-0.ngrok-free.app/slack/events"
+      "is_enabled": true
     },
     "org_deploy_enabled": true,
-    "socket_mode_enabled": false,
+    "socket_mode_enabled": true,
     "token_rotation_enabled": false
   }
 }

standardized-auth/manifest.json

@@ -71,9 +71,24 @@
   <dependencies>
     <dependency>
       <groupId>com.slack.api</groupId>
-      <artifactId>bolt-jetty</artifactId>
+      <artifactId>bolt</artifactId>
       <version>1.52.1-SNAPSHOT</version>
     </dependency>
+    <dependency>
+      <groupId>com.slack.api</groupId>
+      <artifactId>bolt-socket-mode</artifactId>
+      <version>1.52.1-SNAPSHOT</version>
+    </dependency>
+    <dependency>
+      <groupId>javax.websocket</groupId>
+      <artifactId>javax.websocket-api</artifactId>
+      <version>1.1</version>
+    </dependency>
+    <dependency>
+      <groupId>org.glassfish.tyrus.bundles</groupId>
+      <artifactId>tyrus-standalone-client</artifactId>
+      <version>1.21</version>
+    </dependency>
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-simple</artifactId>
@@ -86,5 +101,11 @@
       <version>6.1.3</version>
       <scope>test</scope>
     </dependency>
+    <dependency>
+      <groupId>org.mockito</groupId>
+      <artifactId>mockito-junit-jupiter</artifactId>
+      <version>5.23.0</version>
+      <scope>test</scope>
+    </dependency>
   </dependencies>
 </project>

standardized-auth/pom.xml

@@ -0,0 +1,48 @@
+package acme;
+
+import static com.slack.api.model.block.Blocks.asBlocks;
+import static com.slack.api.model.block.Blocks.authProvider;
+import static com.slack.api.model.block.Blocks.section;
+import static com.slack.api.model.block.composition.BlockCompositions.markdownText;
+import static com.slack.api.model.block.composition.BlockCompositions.plainText;
+import static com.slack.api.model.view.Views.view;
+
+import com.slack.api.methods.request.apps.user.connection.AppsUserConnectionRequestAuthRequest.PrimaryProvider;
+import com.slack.api.model.view.View;
+
+public final class Acme {
+    public static final String PROVIDER_VALUE = "acme";
+
+    private Acme() {}
+
+    public static PrimaryProvider provider(String userId) {
+        PrimaryProvider acme = PrimaryProvider.builder()
+                .value(PROVIDER_VALUE)
+                .name(plainText("Acme account"))
+                .description(plainText("Order rocket skates, anvils, and giant magnets without leaving Slack."))
+                .isConnected(Connections.isConnected(userId))
+                .build();
+        if (acme.getIsConnected()) {
+            acme.setConnectedIdentity(plainText(userId));
+        }
+        return acme;
+    }
+
+    public static View homeView(PrimaryProvider acme) {
+        return view(view -> view.type("home")
+                .blocks(asBlocks(
+                        section(section -> section.text(markdownText("*Welcome to Acme!* :rocket:\n"
+                                + "Anvils ship same day, gravity permitting. "
+                                + "Please keep giant magnets away from your laptop."))),
+                        authProvider(block -> block.value(acme.getValue())
+                                .name(acme.getName())
+                                .description(acme.getDescription())
+                                .iconUrl(acme.getIconUrl())
+                                .authUrl(acme.getAuthUrl())
+                                .disconnectUrl(acme.getDisconnectUrl())
+                                .isConnected(acme.getIsConnected())
+                                .connectedIdentity(acme.getConnectedIdentity())
+                                .connectedContext(acme.getConnectedContext())
+                                .accessory(acme.getAccessory())))));
+    }
+}