Improve developer profile claim flow and add GitHub verification - #287
Conversation
Creating a developer profile with an id that already belongs to an unowned legacy profile (e.g. "fossbilling") failed with a dead-end error. Surface a link to that profile's public page and the existing claim flow instead. Claude-Session: https://claude.ai/code/session_01QaaK546yMRs9xgyGrnu7Vx
Deploying with
|
| Status | Name | Latest Commit | Preview URL | Updated (UTC) |
|---|---|---|---|---|
| ✅ Deployment successful! View logs |
extensions | 181d0d0 | Commit Preview URL Branch Preview URL |
Jul 28 2026, 01:52 PM |
![cubic-dev-ai[bot]](https://avatars.githubusercontent.com/in/1082092?s=60&v=4){kind=small}
There was a problem hiding this comment.
0 issues found across 1 file (changes from recent commits).
Requires human review: Introduces a new verification feature with a database migration (new columns on users), modifies authentication sync from OIDC claims, and adds auto-verification logic. These changes involve security and operational tradeoffs that need human sign-off.
Re-trigger cubic
There was a problem hiding this comment.
All reported issues were addressed
Reply with feedback, questions, or to request a fix.
Re-trigger cubic
- The "claim this profile instead" guidance now only shows when the conflicting id is actually unclaimed (checked via getDeveloperById). A duplicate id already owned by someone else has no working claim option, so pointing the user at it was a dead end. - Detection now matches the api repo's dedicated DEVELOPER_ID_TAKEN error code instead of the human-readable message string, so a reworded message can't silently break it. - PublicDeveloperProfile now excludes github_org_verified/ github_verification_note, same as contact_email/content_revision — these are a moderator-only signal and were reachable by public /developer/[id] consumers even though the query never selects them. Claude-Session: https://claude.ai/code/session_01QaaK546yMRs9xgyGrnu7Vx
There was a problem hiding this comment.
0 issues found across 2 files (changes from recent commits).
Requires human review: Includes a database migration (adding columns to users table) and introduces GitHub OIDC-based verification for developer profiles, which are operational and policy changes requiring human oversight.
Re-trigger cubic
1 participant
Summary by cubic
Adds GitHub-based verification to developer profiles and claims, and improves the create/claim flow. Moderators see a “GitHub verified” badge, and users are only guided to claim when a taken ID belongs to an unclaimed profile.
New Features
users(github_login,github_orgs).github_org_verifiedandgithub_verification_noteto moderators only; show a “GitHub verified” badge in developer and claim moderation lists.DEVELOPER_ID_TAKENcode and confirms the profile is unclaimed; add clearer helper text for the ID field.Migration
0005_add_github_fields.sqlto addgithub_loginandgithub_orgstousers.read:orgscope so OIDC claims populate.Written for commit 181d0d0. Summary will update on new commits.