[WIP] Add ability for users to connect Slack for daily reminders #4708

Copilot · 2025-11-01T20:19:42Z

Summary

This PR adds the ability for users to connect their Slack accounts to receive daily check-in reminders via Slack Direct Messages.

Key Features:

Slack OAuth Integration: Users can connect their Slack account via OAuth 2.0
Slack DM Reminders: Users receive check-in reminders via Slack DM when enabled
Flexible Notifications: Users can choose email, Slack, or both
Test Functionality: Users can test Slack reminders before enabling

Changes:

Added slack_user_id field to UserProfile model
Added slack_notifications_enabled field to ReminderSettings model
Created Slack OAuth endpoints for connection/disconnection
Updated management command to send Slack DMs
Enhanced reminder settings UI with Slack integration
Added comprehensive tests for all functionality

Security Improvements:

OAuth state parameter uses cryptographically secure random values
State is stored in session for CSRF protection
Specific exception handling instead of bare Exception catches
Detailed error messages without exposing raw exceptions

Configuration:

URLs are now configurable via BASE_URL setting instead of hardcoded
Environment variables required:

SLACK_CLIENT_ID=your_client_id
SLACK_CLIENT_SECRET=your_client_secret
SLACK_BOT_TOKEN=xoxb-your-bot-token
BASE_URL=https://your-domain.com  # Optional, defaults to https://www.owasp.org

Original prompt

allow users to connect their slack accounts to get reminders about their daily checkin from the organization

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.

coderabbitai · 2025-11-01T20:19:54Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Note

Other AI code review bot(s) detected

CodeRabbit has detected other AI code review bot(s) in this pull request and will avoid duplicating their findings in the review comments. This may lead to a less comprehensive review.

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Co-authored-by: DonnieBLT <[email protected]>

DonnieBLT · 2025-11-01T22:29:25Z

@copilot continue

Co-authored-by: DonnieBLT <[email protected]>

Copilot · 2025-11-01T22:34:28Z

@copilot continue

Completed! All tasks from the PR checklist have been finished (commit f5a7caf).

What was done:

✅ Ran black, isort, and ruff formatters on all modified files
✅ Fixed import ordering and formatting issues
✅ Verified all code passes linting checks
✅ Updated PR description with comprehensive summary

Slack Integration Features:
The reminder settings page now includes a new Slack Integration section that allows users to:

Connect their Slack account via OAuth 2.0
Enable/disable Slack DM reminders
Test Slack notifications before enabling
Disconnect their Slack account anytime

UI Changes:

Before connection: Shows "Connect Slack Account" button with Slack logo
After connection: Shows green checkmark status, "Enable Slack notifications" toggle, and "Send Test" button
Design uses the BLT red color (#e74c3c) and matches existing UI patterns

Environment variables needed:

SLACK_CLIENT_ID=your_client_id
SLACK_CLIENT_SECRET=your_client_secret  
SLACK_BOT_TOKEN=xoxb-your-bot-token

The management command daily_checkin_reminder now automatically sends Slack DMs to users who have connected their accounts and enabled notifications.

Copilot

Pull Request Overview

This PR adds Slack integration to the daily reminders feature, enabling users to receive daily check-in reminders via Slack DMs in addition to email notifications.

Key changes:

Implements Slack OAuth flow for connecting user accounts
Adds database fields to store Slack user IDs and notification preferences
Extends the daily reminder command to send Slack DMs when enabled

Reviewed Changes

Copilot reviewed 8 out of 8 changed files in this pull request and generated 7 comments.

Show a summary per file

File	Description
website/views/daily_reminders.py	Added OAuth flow views (connect, callback, disconnect) and test Slack reminder functionality
website/test_slack_connection.py	Added comprehensive test coverage for Slack connection features
website/templates/website/reminder_settings.html	Added UI for Slack integration with connection status and test button
website/models.py	Added slack_user_id to UserProfile and slack_notifications_enabled to ReminderSettings
website/migrations/0247_add_slack_connection_fields.py	Database migration for new Slack-related fields
website/management/commands/daily_checkin_reminder.py	Extended reminder command to send Slack DMs
website/forms.py	Added slack_notifications_enabled field to ReminderSettingsForm
blt/urls.py	Added URL patterns for Slack OAuth endpoints

website/views/daily_reminders.py

Copilot · 2025-11-02T16:29:38Z

website/management/commands/daily_checkin_reminder.py

+                except Exception as e:
+                    logger.error(f"Error sending Slack reminder to {userprofile.user.username}: {str(e)}")


This error message includes the exception using str(e), which violates the project guideline that states 'dont include exceptions in error messages but be very detailed in text what the error is'. Consider logging a more descriptive error message without including the raw exception.

@copilot apply changes based on this feedback

Fixed in commit 6a6462f. Removed str(e) from error messages and added detailed descriptive messages without exposing the raw exception. Now catching SlackApiError specifically with appropriate error descriptions.

website/management/commands/daily_checkin_reminder.py

website/views/daily_reminders.py

Co-authored-by: Copilot <[email protected]>

…, configurable URL Co-authored-by: DonnieBLT <[email protected]>

Copilot · 2025-11-02T17:51:04Z

@copilot continue

All code review feedback has been addressed in commit 6a6462f. The PR is complete and ready for final review:

Security improvements implemented:

OAuth state uses cryptographically secure random values (32 chars)
State stored in session for CSRF protection
Specific exception handling (SlackApiError, ValidationError, DatabaseError, RequestException)
Error messages don't expose raw exceptions

Configuration improvements:

URLs now configurable via BASE_URL setting
Falls back to https://www.owasp.org if not set

All formatters have been run and tests updated to match the new security model.

DonnieBLT · 2025-11-02T18:06:53Z

@copilot fix the precommit issues

…ve conflicts Co-authored-by: DonnieBLT <[email protected]>

Copilot · 2025-11-22T23:24:54Z

@copilot update and fix conflicts

Updated and conflicts resolved in commit 97b199d.

Merge details:

Merged latest main branch into the PR
Resolved conflicts in:
- blt/middleware/throttling.py - Added missing import os and updated comment
- poetry.lock - Accepted main version
- Template files - Accepted main versions (not modified by this PR)
- Test files - Accepted main versions
- website/views/core.py - Accepted main version with enhanced hackathon statistics
- website/management/commands/daily_checkin_reminder.py - Kept our version (adds Slack functionality)

All conflicts resolved, formatters run, and branch is now up to date with main.

DonnieBLT · 2025-11-26T23:32:09Z

@copilot apply changes based on the comments in this thread and fix the conflicts too please keep the changes that we make only related to this feature

Co-authored-by: DonnieBLT <[email protected]>

Copilot · 2025-11-26T23:38:45Z

@copilot apply changes based on the comments in this thread and fix the conflicts too please keep the changes that we make on...

Fixed in commit 80494f6.

Changes made:

Merged latest main branch into the PR
Resolved all conflicts by accepting main versions for files not related to this feature
Kept our Slack feature changes:
- website/management/commands/daily_checkin_reminder.py - Slack DM functionality
- blt/urls.py - Added Slack OAuth URL patterns
- website/views/daily_reminders.py - Slack OAuth views
- Other Slack-related files unchanged

All pre-commit checks pass (black, isort, ruff).

DonnieBLT · 2025-11-27T00:50:00Z

@copilot fix conflicts please

Co-authored-by: DonnieBLT <[email protected]>

Copilot · 2025-11-27T00:54:05Z

@copilot fix conflicts please

Fixed in commit e8a2619.

Conflicts resolved:

website/models.py - Added slack_user_count field from main
website/views/user.py - Added copilot contributor exclusion from main
website/management/commands/daily_checkin_reminder.py - Kept our Slack DM functionality

All pre-commit checks pass.

github-actions · 2025-12-06T06:38:58Z

📅 PR Updated

This pull request was last updated on: Sat, 06 Dec 2025 06:38:58 GMT

This comment is automatically updated when the PR is synchronized with the base branch.

Initial plan

7d83be6

Copilot AI assigned Copilot and DonnieBLT Nov 1, 2025

github-project-automation bot added this to 📌 OWASP BLT Project Board Nov 1, 2025

github-project-automation bot moved this to Backlog in 📌 OWASP BLT Project Board Nov 1, 2025

Copilot started work on behalf of DonnieBLT November 1, 2025 20:20 View session

Copilot AI and others added 2 commits November 1, 2025 20:30

Add Slack account connection for daily check-in reminders

0d9dad3

Co-authored-by: DonnieBLT <[email protected]>

Add tests for Slack connection functionality

12c016e

Co-authored-by: DonnieBLT <[email protected]>

Copilot AI requested a review from DonnieBLT November 1, 2025 20:34

Copilot started work on behalf of DonnieBLT November 1, 2025 22:29 View session

Run code formatters (black, isort, ruff) on modified files

f5a7caf

Co-authored-by: DonnieBLT <[email protected]>

Copilot finished work on behalf of DonnieBLT November 1, 2025 22:35

Merge branch 'main' into copilot/add-slack-account-connection

b737d1a

DonnieBLT requested a review from Copilot November 2, 2025 16:27

DonnieBLT marked this pull request as ready for review November 2, 2025 16:27

Copilot AI reviewed Nov 2, 2025

View reviewed changes

Update website/views/daily_reminders.py

93311f9

Co-authored-by: Copilot <[email protected]>

github-actions bot added the files-changed: 8 PR changes 8 files label Nov 2, 2025

Copilot started work on behalf of DonnieBLT November 2, 2025 17:43 View session

Address code review feedback: secure OAuth state, specific exceptions…

6a6462f

…, configurable URL Co-authored-by: DonnieBLT <[email protected]>

Copilot finished work on behalf of DonnieBLT November 2, 2025 17:49

Copilot started work on behalf of DonnieBLT November 2, 2025 17:49 View session

Copilot finished work on behalf of DonnieBLT November 2, 2025 17:51

Copilot started work on behalf of DonnieBLT November 2, 2025 18:07 View session

DonnieBLT added the reviewed label Nov 22, 2025

Copilot started work on behalf of DonnieBLT November 22, 2025 23:19 View session

Merge branch 'main' into copilot/add-slack-account-connection - resol…

97b199d

…ve conflicts Co-authored-by: DonnieBLT <[email protected]>

Copilot finished work on behalf of DonnieBLT November 22, 2025 23:26

DonnieBLT removed the reviewed label Nov 23, 2025

github-actions bot removed the has-conflicts PR has merge conflicts that need to be resolved label Nov 24, 2025

Copilot started work on behalf of DonnieBLT November 26, 2025 23:32 View session

Merge main and resolve conflicts - keep only Slack feature changes

80494f6

Co-authored-by: DonnieBLT <[email protected]>

Copilot finished work on behalf of DonnieBLT November 26, 2025 23:40

Copilot started work on behalf of DonnieBLT November 27, 2025 00:50 View session

Merge main and resolve conflicts

e8a2619

Co-authored-by: DonnieBLT <[email protected]>

Copilot finished work on behalf of DonnieBLT November 27, 2025 00:55

		except Exception as e:
		logger.error(f"Error sending Slack reminder to {userprofile.user.username}: {str(e)}")

Uh oh!

[WIP] Add ability for users to connect Slack for daily reminders #4708

Are you sure you want to change the base?

[WIP] Add ability for users to connect Slack for daily reminders #4708

Uh oh!

Conversation

Copilot AI commented Nov 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Key Features:

Changes:

Security Improvements:

Configuration:

Uh oh!

coderabbitai bot commented Nov 1, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Other AI code review bot(s) detected

Uh oh!

DonnieBLT commented Nov 1, 2025

Uh oh!

Copilot AI commented Nov 1, 2025

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull Request Overview

Reviewed Changes

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Copilot AI Nov 2, 2025

Choose a reason for hiding this comment

Uh oh!

DonnieBLT Nov 2, 2025

Choose a reason for hiding this comment

Uh oh!

Copilot AI Nov 2, 2025

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI commented Nov 2, 2025

Uh oh!

DonnieBLT commented Nov 2, 2025

Uh oh!

Copilot AI commented Nov 22, 2025

Uh oh!

DonnieBLT commented Nov 26, 2025

Uh oh!

Copilot AI commented Nov 26, 2025

Uh oh!

DonnieBLT commented Nov 27, 2025

Uh oh!

Copilot AI commented Nov 27, 2025

Uh oh!

github-actions bot commented Dec 6, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Copilot AI commented Nov 1, 2025 •

edited

Loading

coderabbitai bot commented Nov 1, 2025 •

edited

Loading