Slack Green 블로그

We called users.info and users.profile.get for a person, a bot and Slackbot, changed the person's display name in between, and logged which fields moved. Code, output, the email scope test and every user_not_found case we hit.

Slack paginates list methods with a cursor: pass response_metadata.next_cursor back as cursor until it is empty. We paged 27 real messages on 2 October 2026 and broke the cursor five ways to see which ones fail.

A Slack app created today cannot use the RTM API. We called rtm.connect and rtm.start with every token a new app gets on 2 October 2026, tried to request the rtm:stream scope, and ran the same bot over Socket Mode.

icon_emoji, icon_url and username only work with the chat:write.customize scope, and Slack ignores them silently without it. We tested every case on 2 October 2026, plus webhooks and the app icon upload limits.

We sent chat.postMessage with as_user=true, as_user=false and no as_user, with a bot token and a user token. as_user=true changed nothing, as_user=false was rejected, and only the user token posted under the person's name.

A Slack bot has three IDs: a user ID (U...), a bot ID (B...) and an app ID (A...). We called auth.test with a bot, user and app-level token on 2 October 2026 and show where each ID turns up.

We ran Slack's Add to Slack flow against a 34-line Python callback on localhost, then broke each step: a reused code, a typo, a wrong secret, a wrong redirect_uri, a cancelled consent screen and a code we held for 11 minutes.

With token rotation on, Slack access tokens start with xoxe. and expire after 12 hours. We turned it on for a test app on 2 October 2026, refreshed the token six times, and logged which old tokens kept working.

회사가 노트북 카메라로 나를 볼 수 있는 것은 화상 통화 중과, 카메라를 켜는 프로그램을 통할 때뿐입니다. Windows 11과 macOS에서 카메라가 켜졌는지 알아보는 법, 웹캠 사진을 찍는 모니터링 도구, 법이 허용하는 범위를 정리했습니다.

conversations.list returns every public channel but only the private channels your bot is in. We ran it with a bot token and a user token on 2 October 2026 and pasted what each one returned.

We posted rich_text blocks with every element type, lists nested 9 levels deep, quotes and code, then broke them on purpose. The JSON we sent, screenshots of how Slack web drew it, and the exact invalid_blocks errors.

Slack 무료 플랜에서는 최근 90일의 메시지와 파일만 보이고, 1년이 지난 데이터는 삭제되며, 앱은 10개까지, 허들과 Slack Connect는 1:1만 됩니다. 고객지원센터에 나온 모든 제한, 90일째에 일어나는 일, 유료로 바꿀 만한 때를 정리했습니다.

We added people and bots to public and private channels with conversations.invite and conversations.join, using a bot token and a user token. Every response we got, including already_in_channel, cant_invite_self, cant_invite and the force flag.

We called users.list with a bot token in a one-person workspace and got 14 members back: Slackbot, 1 person, 4 live bots and 8 deleted ones. The script, the curl call, cursor paging to the end, and what users:read.email changes.

Slack 메시지에서 보내지 않고 줄을 바꾸려면 Shift+Enter를 누르세요. Enter로 줄을 바꾸고 싶다면 환경설정의 고급에서 메시지 작성 시 Enter 키 동작을 "새 줄 시작"으로 바꾸고, Cmd+Enter나 Ctrl+Enter로 보내세요. 모바일, 목록, 코드 블록, API 줄바꿈도 정리했습니다.

Slack 아이콘의 빨간 점은 어딘가에 읽지 않은 활동이 있다는 뜻이고, 빨간 숫자는 DM, 멘션, 키워드, 팔로우한 스레드 답글을 뜻합니다. Shift+Esc로 모두 읽음 처리하고 스레드, 활동, 해야 할 일, 다른 워크스페이스를 확인한 뒤 캐시를 지우거나 운영체제 배지를 초기화하세요.

We pointed a slash command at a local server and broke it on purpose: HTTP 500, 401 and 302, a wrong path, a dead tunnel, a stopped server and Socket Mode with no process. Each one gave dispatch_failed. A slow reply gave operation_timeout instead.

Slack 앱이 열리지 않을 때는 대개 창 없이 이미 실행 중이거나, 뽑아 둔 모니터에 창이 있습니다. Slack 프로세스를 모두 끝내고 다시 열고, 안 되면 앱 데이터 초기화, 재설치, 로그인 링크 확인을 하세요. Windows 11과 Mac 단계입니다.

Slack 메시지 text의 한도는 40,000자이고, 개발자 문서는 4,000자 미만을 권장합니다. API로 시험해 보니 긴 글은 잘리지 않고 4,000자씩 메시지로 나뉘어 올라갔습니다. Block Kit 섹션은 3,000자, 헤더는 150자까지입니다. 긴 메시지에서 일어나는 일, 다른 글자 수 한도, 긴 글 나누는 법을 정리했습니다.

We clicked a button, a static_select and a datepicker in Slack on 1 October 2026 and logged the block_actions payloads our app received. Then we measured response_url: 5 posts, then used_url; it worked at 29:50 and was dead at 30:10.

We posted a web page, a YouTube video and an image with every combination of unfurl_links and unfurl_media on 1 October 2026, then built a custom preview with link_shared and chat.unfurl. The flags do not split the way the names suggest.

We scheduled five messages for 4:40 PM on 1 October 2026, then archived, left and deleted their channels and deleted a thread parent before the send time. Two sent, three never did, and Slack gave no notice about the three.

We broke a Slack bot nine ways on 1 October 2026, in Socket Mode and over HTTP, and wrote down what the person in Slack saw and what the app received each time. The table of causes, symptoms and fixes comes from those runs.

A Slack bot can DM a user by passing the user ID as the channel in chat.postMessage, or by opening the DM with conversations.open first. We ran both, recorded where each message landed, and reproduced messages_tab_disabled and 'Sending messages to this app has been turned off'.

We made a Slack Events API endpoint fail on purpose and logged every redelivery with its X-Slack-Retry-Num and X-Slack-Retry-Reason headers. Slack retried 3 times, at about 0 s, 1 minute and 6 minutes. Measured timing, what X-Slack-No-Retry does, and a handler that stops the retries.

Slack signs every request with your app's signing secret: HMAC-SHA256 of v0:timestamp:raw body. We verified a real slash command and a real event on 1 October 2026, then broke it the four ways apps break it.

A Slack message link is /archives/<channel>/p<ts without the dot>. We copied links in Slack web and called chat.getPermalink on 1 October 2026 to compare the formats for channel messages and thread replies, then turned links back into a channel and ts.

We created a channel canvas with the Slack API, wrote markdown into it, found sections and edited them, then read it back. The free-plan errors, the markdown that rendered and the mention syntax that did not.

We called reactions.add with standard, aliased, skin-tone and custom emoji names in a test workspace, then kept adding reactions until Slack refused. Every response, the reaction_added payload, and the per-user limit we hit.

Slack verifies an Events API Request URL by POSTing a url_verification challenge. We ran a 16-line Flask handler behind a tunnel and recorded the request, the Verified tick, and the exact error Slack shows for a wrong body, an HTTP error and a slow reply.