feat(desktop): add GitHub OAuth and API-level token exchange#428

Merged

saddlepaddle merged 12 commits into

mainfrom

direct-google-oauth

Dec 19, 2025

Commits on Dec 19, 2025

WIP - reorder the clerk flow
saddlepaddle
committed
fix(web): redesign desktop auth flow for consistent OAuth experience

saddlepaddle
and
claude
committed
feat(desktop): implement direct Clerk OAuth flow

saddlepaddle
and
claude
committed
fix(desktop): route OAuth through web callback for better UX

saddlepaddle
and
claude
committed
feat(desktop): add GitHub OAuth and API-level token exchange

saddlepaddle
and
claude
committed
fix: use GH_* secret names (GitHub disallows GITHUB_ prefix)
saddlepaddle
committed
fix(desktop): add OAuth client IDs to test setup
saddlepaddle
committed
fix(ci): always deploy to prod on merge to main
saddlepaddle
committed
refactor: rename GITHUB_CLIENT_* to GH_CLIENT_* for consistency
saddlepaddle
committed
fix(auth): only trust verified emails from GitHub /user/emails endpoint
saddlepaddle
committed
fix(auth): security improvements and code cleanup

saddlepaddle
and
claude
committed
feat(web): add GitHub OAuth and fix PostHog middleware

saddlepaddle
and
claude
committed