Add token rotation section to docs (#1009)

slackapi · Jul 21, 2021 · 7bcbfb6 · 7bcbfb6
1 parent b0343da
commit 7bcbfb6
Show file tree

Hide file tree

Showing 8 changed files with 23 additions and 7 deletions.
diff --git a/docs/_advanced/context.md b/docs/_advanced/context.md
@@ -2,7 +2,7 @@
 title: Adding context
 lang: en
 slug: context
-order: 6
+order: 7
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/conversation_store.md b/docs/_advanced/conversation_store.md
@@ -2,7 +2,7 @@
 title: Conversation stores
 lang: en
 slug: conversation-store
-order: 3
+order: 4
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/custom_routes.md b/docs/_advanced/custom_routes.md
@@ -2,7 +2,7 @@
 title: Adding Custom HTTP routes 
 lang: en
 slug: custom-routes
-order: 9
+order: 10
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/logging.md b/docs/_advanced/logging.md
@@ -2,7 +2,7 @@
 title: Logging
 lang: en
 slug: logging
-order: 7
+order: 8
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/middleware_global.md b/docs/_advanced/middleware_global.md
@@ -2,7 +2,7 @@
 title: Global middleware
 lang: en
 slug: global-middleware
-order: 4
+order: 5
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/middleware_listener.md b/docs/_advanced/middleware_listener.md
@@ -2,7 +2,7 @@
 title: Listener middleware
 lang: en
 slug: listener-middleware
-order: 5
+order: 6
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/receiver.md b/docs/_advanced/receiver.md
@@ -2,7 +2,7 @@
 title: Customizing a receiver
 lang: en
 slug: receiver
-order: 8
+order: 9
 ---
 
 <div class="section-content">

diff --git a/docs/_advanced/token_rotation.md b/docs/_advanced/token_rotation.md
@@ -0,0 +1,16 @@
+---
+title: Token rotation
+lang: en
+slug: token-rotation
+order: 3
+---
+
+<div class="section-content">
+Supported in Bolt for JavaScript as of v3.5.0, token rotation provides an extra layer of security for your access tokens and is defined by the [OAuth V2 RFC](https://datatracker.ietf.org/doc/html/rfc6749#section-10.4). 
+
+Instead of an access token representing an existing installation of your Slack app indefinitely, with token rotation enabled, access tokens expire. A refresh token acts as a long-lived way to refresh your access tokens.
+
+Bolt for JavaScript supports and will handle token rotation automatically so long as the [built-in OAuth](https://slack.dev/bolt-js/concepts#authenticating-oauth) functionality is used.
+
+For more information about token rotation, please see the [documentation](https://api.slack.com/authentication/rotation).
+</div>