Repository navigation

People can link their Slack and GitHub accounts - #763

Merged

guidovizoso merged 103 commits into

mainfrom

guido/github-plugin-spec

Oct 12, 2026

Merged

People can link their Slack and GitHub accounts#763
guidovizoso merged 103 commits into
mainfrom
guido/github-plugin-spec

Commits on Oct 8, 2026
- feat(app): add link confirmation state
  guidovizoso
  committed
  64ef86a
- feat(server): add identity link types
  guidovizoso
  committed
  1ba5257
- docs: describe linked accounts
  guidovizoso
  committed
  6eb24f8
- feat(app): add linked account queries
  guidovizoso
  committed
  f2304ca
- feat(server): add identity link tables
  guidovizoso
  committed
  59d521a
- feat(app): add linked account mutations
  guidovizoso
  committed
  b249fe4
- feat(server): add identity provider registry
  guidovizoso
  committed
  271005f
- feat(server): add identity link store
  guidovizoso
  committed
  3b27716
- feat(app): confirm chat-started account links
  guidovizoso
  committed
  569a4e4
- feat(app): add linked accounts section
  guidovizoso
  committed
  13cc1e3
- fix(server): serialize one person's links within a realm
  guidovizoso
  committed
  8894499
- feat(server): add identity link challenges
  guidovizoso
  committed
  9c49f63
- feat(app): list and disconnect linked accounts
  guidovizoso
  committed
  78f9b9b
- feat(server): add linked account routes
  guidovizoso
  committed
  ee9a73e
- feat(server): serve linked accounts under /api/identity
  guidovizoso
  committed
  fc08155
- chore(server): drop plan path comments
  guidovizoso
  committed
  f2009fe
- chore(app): drop plan path comments
  guidovizoso
  committed
  fa517ef
- fix(app): keep a confirmed link confirmed
  guidovizoso
  committed
  2fda0cc
- fix(server): surface unexpected confirm failures
  guidovizoso
  committed
  34275c6
- fix(app): describe the link confirmation page
  guidovizoso
  committed
  6ed01a7
- fix(server): refuse cross-site link confirmations
  guidovizoso
  committed
  2c75c12
- test(server): pin identity route middleware order
  guidovizoso
  committed
  fbb5afa
- fix(server): clear stale link challenges
  guidovizoso
  committed
  3dc139c
- fix(server): accept trusted app origins when confirming links
  guidovizoso
  committed
  d5ca067
- fix(server): issue link codes to the signed-in person
  guidovizoso
  committed
  09c3173
- refactor(app): remove the chat-started link confirmation page
  guidovizoso
  committed
  285448e
- fix(server): ignore identity links for unknown providers
  guidovizoso
  committed
  588d63f
- fix(server): revoke linked tokens when a person is removed
  guidovizoso
  committed
  a38be44
- fix(app): quieter, per-account linked account errors
  guidovizoso
  committed
  b64b158
- fix(server): audit disconnecting a linked account
  guidovizoso
  committed
  93a2a62
- fix(server): refuse identity links to unusable credentials
  guidovizoso
  committed
  25e6f6f
- docs: describe linked accounts as they stand
  guidovizoso
  committed
  3da3223
- fix(server): refuse blank identity parts
  guidovizoso
  committed
  116d79d
- docs: warn that a linked-account code must not be shared
  guidovizoso
  committed
  01d825d
- fix(server): retire linked accounts completely when a person is removed
  guidovizoso
  committed
  7ec2bc4
- fix(server): keep, lock and own identity link credentials
  guidovizoso
  committed
  8264d2c
- fix(server): one live link code per person and provider
  guidovizoso
  committed
  0541aaa
- fix(server): audit the link that was actually removed
  guidovizoso
  committed
  12482a8
- fix(server): mark the linked-accounts 503 as not configured
  guidovizoso
  committed
  12be7b9
- fix(app): per-row disconnect and honest linked-account errors
  guidovizoso
  committed
  901f597
- fix(server): tag a missing linked account
  guidovizoso
  committed
  cd1d7aa
- fix(app): only the server's own not-found counts as disconnected
  guidovizoso
  committed
  9dc9260
- fix(app): show linked-account load errors alongside stale rows
  guidovizoso
  committed
  55d234c
- test(server): pin which identity constraint fired
  guidovizoso
  committed
  1f3ae88
- docs: say what replacement and removal do to linked accounts
  guidovizoso
  committed
  2d9cb63
- fix(server): accept only the provider's own token on a link
  guidovizoso
  committed
  58c6223
- fix(app): fall back for unknown provider icons
  guidovizoso
  committed
  f842c76
- fix(server): treat link handles the same on every path
  guidovizoso
  committed
  c464bbc
- fix(server): serialize link codes with person removal
  guidovizoso
  committed
  5a30d23
- refactor(server): tidy identity store edges
  guidovizoso
  committed
  347f11b
- refactor(server): share identity lock keys with retirement
  guidovizoso
  committed
  09bb637
- fix(server): audit linked-account retirement inside its transaction
  guidovizoso
  committed
  56888be
- fix(server): record linked-account retirement accurately
  guidovizoso
  committed
  7c697ac
- fix(server): name both failures when retiring a person's accounts
  guidovizoso
  committed
  927bf12
- docs: document the GitHub App sign-in variables
  guidovizoso
  committed
  1af385a
- feat(server): read GitHub App sign-in settings
  guidovizoso
  committed
  36c16e7
- docs: explain linking Slack and GitHub accounts
  guidovizoso
  committed
  1d1ea8d
- feat(server): let the OpenTag handler redeem identity link codes
  guidovizoso
  committed
  a222ab8
- feat(server): add GitHub App user sign-in client
  guidovizoso
  committed
  911b726
- feat(app): ask which account types a person can link
  guidovizoso
  committed
  e8a18d0
- feat(app): add Slack link code and GitHub connect requests
  guidovizoso
  committed
  db8b61b
- feat(server): report which account types can be linked
  guidovizoso
  committed
  e82a928
- feat(server): redeem Slack link codes into identity links
  guidovizoso
  committed
  5db674f
- feat(app): show linked accounts whenever linking is available
  guidovizoso
  committed
  e021708
- feat(app): report the linked-account result on connected accounts
  guidovizoso
  committed
  791a4c2
- feat(server): offer Slack link codes from identity routes
  guidovizoso
  committed
  47df1ed
- feat(server): link Slack accounts from OpenTag link codes
  guidovizoso
  committed
  dacc12e
- feat(app): link Slack from linked accounts
  guidovizoso
  committed
  6f59867
- feat(server): finish GitHub account linking on the sign-in callback
  guidovizoso
  committed
  e0908aa
- feat(server): start GitHub sign-in from identity routes
  guidovizoso
  committed
  b04761c
- feat(app): connect GitHub from linked accounts
  guidovizoso
  committed
  1d350f5
- test(server): cover GitHub linking against the database
  guidovizoso
  committed
  a0453b9
- feat(server): offer Slack and GitHub linking where they are configured
  guidovizoso
  committed
  9de8e0c
- feat(server): mount the GitHub sign-in callback behind the session
  guidovizoso
  committed
  84f408c
- feat(server): wire the GitHub sign-in callback at startup
  guidovizoso
  committed
  9125b79
- test(server): pass the self-host banner at its own createApp position
  guidovizoso
  committed
  8c7131b
- feat(app): show each linkable account type as its own card
  guidovizoso
  committed
  0a0f31f
- fix(server): accept Slack link codes only in direct messages
  guidovizoso
  committed
  09196ad
- fix(server): offer linking only when its return path is wired
  guidovizoso
  committed
  fdbf6fb
- fix(server): refuse a GitHub App without a public URL at start-up
  guidovizoso
  committed
  eeddc21
- fix(app): only follow a GitHub sign-in address from github.com
  guidovizoso
  committed
  dc5c50d
- fix(app): say when the linkable account types could not be checked
  guidovizoso
  committed
  7380b12
- fix(server): keep the existing GitHub link intact when a re-link fails
  guidovizoso
  committed
  a6d88f1
- fix(server): drop the unused GITHUB_APP_SLUG setting
  guidovizoso
  committed
  9d68b17
- fix(server): report a committed link as linked even if its audit write fails
  guidovizoso
  committed
  6d948bc
- fix(app): say when the Slack link code could not be copied
  guidovizoso
  committed
  5c2e730
- test(server): prove the GitHub callback works through createApp and clean up precisely
  guidovizoso
  committed
  1ac677f
- docs: describe linking accounts as it now works
  guidovizoso
  committed
  e6f9524
- fix(server): log why each GitHub sign-in callback failed, without secrets
  guidovizoso
  committed
  727112b
- docs(code): make linking comments match what the code does
  guidovizoso
  committed
  55ae763
- fix(app): keep Connect GitHub disabled while leaving for GitHub
  guidovizoso
  committed
  725122c
- fix: tell people when a GitHub account is already linked to someone else
  guidovizoso
  committed
  e9009ab
- fix(app): re-enable Connect GitHub when the page comes back from GitHub
  guidovizoso
  committed
  95ed3aa
- docs(code): list github-taken among the ?linked= outcomes
  guidovizoso
  committed
  771fd0d
- fix(app): drop the linked notice once that account is disconnected
  guidovizoso
  committed
  8d83364
- fix(server): cancel a Slack link code that was posted in a channel
  guidovizoso
  committed
  c07c0a2
- fix(app): give a usable next step when a GitHub account is taken
  guidovizoso
  committed
  c89ecb7
- fix(server): keep account ids out of the link audit-failure log
  guidovizoso
  committed
  bff39d0
- fix(server): report a database error code only for Postgres errors
  guidovizoso
  committed
  5806b29
- fix(server): cancel a Slack link code pasted in a channel without a mention
  guidovizoso
  committed
  78b11af
Commits on Oct 9, 2026
- Merge origin/main into guido/github-plugin-spec
  guidovizoso
  committed
  643024a
- docs: note linked Slack and GitHub accounts in the changelog
  guidovizoso
  committed
  4ef0c72
Commits on Oct 12, 2026
- Merge origin/main into guido/github-plugin-spec
  guidovizoso
  committed
  ea106c7

Commits

Commits on Oct 8, 2026

Commits on Oct 9, 2026

Commits on Oct 12, 2026