← Auth / Security

Messenger linking

auth / security · wireframes · post-sign-in

The screen issues a code to link a messenger account (Slack · Telegram · Mattermost) to a user account. It opens from the assistant bot's link (or from Profile) and requires sign-in — the code is visible only in a signed-in session. The contract — Messenger linking.

Wireframe
achilles.local/link /link · requires sign-in A signed-out user is sent to /login first, then here.
A Achilles

Messenger linking

You're signed in as maxim@company.com. Send the code to the Achilles bot in a direct message (Slack, Telegram or Mattermost) — and it will reply with your access rights.

Your linking code
K7P2-9XQ4 1
Valid for 15 minutes 2 Waiting for the code in your messenger… 3
How to link 1 · Open a direct message with the Achilles bot (Slack, Telegram or Mattermost). 2 · Send it the code above — the bot confirms the link.
Back to profile
  1. 1 The code is one-time; the DB stores only its hash (link_tokens). The account that returns the code is linked to this user account.
  2. 2 TTL 15 minutes; once expired, request a new one from the bot (410 LINK_EXPIRED).
  3. 3 Direction browser → bot: a forwarded link can't hijack the account — the code is visible only in this signed-in session. Why so — linking contract.
  4. If the account is already linked to another user account, the bot replies with a refusal (409 ALREADY_LINKED); an admin removes the existing sign-in link.