Anyone wondering how "easy" it is to obtain a token may be interested in the setup instructions for slack-term[0]. As for token expiration.. I've been logged in

Anyone wondering how "easy" it is to obtain a token may be interested in the setup instructions for slack-term[0]. As for token expiration.. I've been logged into slack-term using the same token for weeks if not months, without needing to reauthenticate. I assume it refreshes. [0]: https://github.com/erroneousboat/slack-term/wiki#running-slack-term-without-legacy-tokens https://github.com/erroneousboat/slack-term/wiki#running-sla... Also free plug for slack-term, I guess. :) TL;DR: socially engineer an EA employee with a link like https://slack.com/oauth/authorize?client_id=32165416946541.136213516385138513521&scope=client&redirect_uri=http%3A%2F%2Foopsyougotjaxxed.com https://slack.com/oauth/authorize?client_id=32165416946541.1... and if they are half asleep they just might auth you. STL;SDR: EA probably permit employees to authenticate with non-official apps/clients, which they probably won't be permitting anymore.