I synced with the Workflow App team, and here’s a hopefully better synopsis:
If a task is in a project with your Workflow App installed, it will display the widget for any user looking at it. Displaying the widget causes a request to be sent to your app directly from the visiting user.
Asana offers Authorization hooks at different times to give your app a chance to get tokens on behalf of some users. These times are:
- Activating the app within a project
- Creating an Automation Rule with an action from your app
- Creating a resource using the Create Resource Form
Here’s a likely scenario:
- Say your app connects Asana to Slack.
- User A activates your app for Project A. Your app sends them through the Slack OAuth flow.
- Next, User B goes to a task within that project. They should see the widget. Your app will need to look up the Slack Token for User A and use that to get the required data for User B’s request.