mirror of
https://github.com/stablyai/orca.git
synced 2026-11-15 18:37:24 +00:00
Neil
91e82b870d
Billing's setup chain now passes the GitHub identity that Orca Cloud auth verified from a GitHub sign-in (githubUserId, githubLogin). The install URL's signed state carries it, and the setup URL checks it against the installation with the App's own credentials: the user's own account, or an active org admin (members:read installation token). A match binds with method 'idp' and skips GitHub's separate Authorize page. Anything else falls back to the OAuth step (A4b) as before.