#1

  1. Do I need to regenerate my consumer API key and secret?

  2. Do all my users need to reauthorize my app, or will their current tokens work for read/write, which was the permission level that their tokens were generated under?

  3. If they want to access DM features, those specific users will need to reauthorize my app, correct?

  4. Also, is there a way to programmatically tell what permissions a user has granted based on their access token and access token secret?

#2

  1. No,

  2. Yes, existing tokens will work with their old permissions, they won’t be forced to re-authorize

  3. Yes,

  4. No, but you can try a call to list DMs to check for DM permissions

1 Like