feat: single lookup (CM-1060)

[ulemons]

Note

Medium Risk
Adds a new public API route that returns verified emails and affiliations for a single GitHub handle, increasing surface area and potential for data exposure if scopes/inputs are misused. Logic reuses existing DAL queries but changes request shape and 404 behavior for missing handles.

Overview
Adds a new GET /public/v1/affiliations/:githubHandle endpoint to fetch affiliations for a single GitHub handle, alongside the existing bulk POST / lookup.

The handler lowercases the handle, looks up the member, returns a NotFoundError when no profile exists, and responds with the member’s display name, verified emails, and resolved affiliations (guarded by the existing READ_AFFILIATIONS scope and rate limiter).

^{Written by Cursor Bugbot for commit 35168c4. This will update automatically on new commits. Configure here.}

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[Copilot]

Pull request overview

Adds a new public v1 endpoint to fetch affiliations for a single contributor by GitHub handle, complementing the existing bulk lookup endpoint.

Changes:

• Add GET /public/v1/affiliations/:githubHandle route.
• Implement getAffiliationByHandle handler to resolve a member, verified emails, and affiliations, then return a single-contributor payload.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 3 comments.

File	Description
backend/src/api/public/v1/affiliations/index.ts	Registers the new GET route for single-handle lookup alongside the existing bulk POST endpoint.
backend/src/api/public/v1/affiliations/getAffiliationByHandle.ts	New handler that looks up a member by GitHub handle and returns emails + resolved affiliations.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, have a team admin enable autofix in the Cursor dashboard.}