Hi,
Your app need to do OAuth to both Xero and Slack API and need to have a session managment to store an access tokens. Each access token ffrom Xero will only last for 30 minutes.
If you want longer access to the organisation, you will need the user to re-authorize your application.
Regards,
Aleksei