Deprecating usage of token as a query string parameter in Web API requests

[eliot-stripe]

Slack announcement (2020-11-30): https://api.slack.com/changelog/2020-11-no-more-tokens-in-querystrings-for-newly-created-apps

Based on my initial splunking, it looks like getResource passes the the request parameters as a URL parameters:

slack/misc.go

Lines 259 to 268 in 853f55b

	func getResource(ctx context.Context, client httpClient, endpoint string, values url.Values, intf interface{}, d debug) error {
	req, err := http.NewRequest("GET", endpoint, nil)
	if err != nil {
	return err
	}
	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
	req.URL.RawQuery = values.Encode()
	return doPost(ctx, client, req, newJSONParser(intf), d)
	}

The callsites of this include token as one of those URL parameters: https://github.com/slack-go/slack/blob/master/chat.go#L696-L714

It's possible that other http methods do as well, but I haven't done an exhaustive search of the codebase.

[kanata2]

Fixed in v0.8.3