RFD 1075: GitHub OAuth login, gated on weftspun org membership
Problem
Uploads need an admin, a real person, organized under a real identity, not an open, anonymous route. The user asked for a way to verify someone’s GitHub identity and their weftspun org membership, so only real org members can admin and organize uploads.
Decision
An OAuth App, not a GitHub App. The user needs to log in as themselves and prove weftspun org membership. A GitHub App suits an unattended deploy action instead, a different, separate need, already distinguished from this one in the discussion that produced this RFD.
Register the OAuth App by hand, GitHub gives no API for it, at github.com/organizations/weftspun/settings/applications/new, name weftspun-studio, homepage https://weftspun-studio.fly.dev, callback https://weftspun-studio.fly.dev/auth/github/callback. See DETAILS.md for the exact registration values, the login flow weftspun_studio needs to add, and the org-membership check that makes this a real gate, not only a login button.