Implement auth method

[wiardvanrij]

At the moment anyone can POST against this application and it will send the message to Slack.

Ideally we implement something like a secret or a bearer token.

Open for suggestions..

[ldemailly]

Can you rely on slack, as in at least 1 valid token should be used yet not used (or is validating the token counting in the flood control and thus will defeat the purpose of the proxy)

[wiardvanrij]

It's a nice idea, but I do think that it adds a bunch of additional overhead to first send a request to Slack "hey is this a valid key" to then only process the message.

Ideally I'm looking for some 'trust' model were not everyone can just POST to the proxy. Even something 'basic' like a static key would be fine?