2FA on Slack allows you to automatically create one-time-passwords for online services you're using (such as Gmail, Mailchimp and Github), directly on Slack using slash commands.
You can deploy this app to an App Engine instance on Google Cloud. Tokens for each account you use will be stored on Google Cloud Firestore.
- Create a virtual environment with Python 3, activate it, then install the packages in requirements.txt
virtualenv env
source env/bin/activate
pip install -r requirements.txt- Create an app.yaml for App Engine deployment, and add your Slack app token as an environment variable.
runtime: python37
instance_class: F1
env_variables:
SLACK_TOKEN: 'XXXXXXXXXXXXXXXX'-
Within your Google Cloud project, activate the Firestore API, create service account credentials, and add the
service-account.jsonfile generated in the root of your project. -
Deploy the app to the Google Cloud App Engine.
gcloud app deploy- Retrieve the App Engine instance's URL (which should be output on console once the deployment is complete), and add it as a Request URL within your Slack app's slash settings page. The app will accept Slack requests on the
/slashdirectory.
To register a new token, you'll first need the TOTP URI generated during the 2FA set up process on your account. The URI will look something like this: otpauth://totp/testaccount@us1.admin.mailchimp.com?secret=3N73THMLTABUN37Y. You'll need the secret parameter on this URI.
Add the new token on Slack using the slash command: /otp add [name] [secret].
To generate a one-time-password simply type /otp get [name] on Slack.
Pull requests are welcome. For major changes, please open an issue first to discuss what you would like to change.
Please make sure to update tests as appropriate.