snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)
Some checks failed
CI / Run tests and lints (push) Failing after 29s
CI / Build CLI docs (push) Has been skipped
CI / Run Playwright end-to-end tests (mysql) (push) Failing after 3s
CI / Run Playwright end-to-end tests (postgres) (push) Failing after 2s
CI / Run Playwright end-to-end tests (sqlite) (push) Failing after 3s
CodeQL / Analyze (go) (push) Failing after 4s
CodeQL / Analyze (javascript) (push) Failing after 3s
Docker Image Scanners / scanners (push) Failing after 4s
Synchronize Issue Labels / Synchronize Issue Labels (push) Has been skipped
CI / Run end-to-end tests (postgres) (push) Failing after 19s
CI / Run end-to-end tests (sqlite) (push) Failing after 2s
CI / Run Playwright end-to-end tests (cockroach) (push) Failing after 2s
CI / Draft newsletter (push) Has been skipped
CI / Generate release (push) Has been skipped
CI / Pending approval Slack notification (push) Has been skipped
CI / Send newsletter (push) Has been skipped

This commit is contained in:
upstream-mirror
2026-09-15 21:19:12 +05:00
commit c60cc7ca75
8092 changed files with 394160 additions and 0 deletions

View File

@@ -0,0 +1,7 @@
disallowAdditionalPropertiesIfNotPresent: false
packageName: client
generateInterfaces: true
structPrefix: true
enumClassPrefix: true
useOneOfDiscriminatorLookup: true
isGoSubmodule: false

View File

@@ -0,0 +1,11 @@
npmName: "@ory/kratos-client"
npmVersion: 0.0.0
# typescriptThreePlus: true
#npmRepository: https://github.com/ory/sdk.git
supportsES6: true
ensureUniqueParams: true
modelPropertyNaming: original
disallowAdditionalPropertiesIfNotPresent: false
withInterfaces: false
useSingleRequestParameter: true
enumUnknownDefaultCase: true

View File

@@ -0,0 +1 @@
[]

View File

@@ -0,0 +1,29 @@
# Makes courierMessageStatus a string enum
- op: remove
path: /components/schemas/courierMessageStatus/format
- op: replace
path: /components/schemas/courierMessageStatus/type
value: string
- op: add
path: /components/schemas/courierMessageStatus/enum
value:
- queued
- sent
- processing
- abandoned
# Makes courierMessageType a string enum
- op: remove
path: /components/schemas/courierMessageType/format
- op: replace
path: /components/schemas/courierMessageType/type
value: string
- op: add
path: /components/schemas/courierMessageType/enum
value:
- email
- phone
# Fix courierMessageStatus query parameter in listMessages endpoint
- op: replace
path: /paths/~1admin~1courier~1messages/get/parameters/2/schema
value:
$ref: "#/components/schemas/courierMessageStatus"

View File

@@ -0,0 +1,6 @@
- op: add
path: /paths/~1sessions~1whoami/get/parameters/0/example
value: MP2YWEMeM8MxjkGKpH4dqOQ4Q4DlSPaj
- op: add
path: /paths/~1sessions~1whoami/get/parameters/1/example
value: ory_session=a19iOVAbdzdgl70Rq1QZmrKmcjDtdsviCTZx7m9a9yHIUS8Wa9T7hvqyGTsLHi6Qifn2WUfpAKx9DWp0SJGleIn9vh2YF4A16id93kXFTgIgmwIOvbVAScyrx7yVl6bPZnCx27ec4WQDtaTewC1CpgudeDV2jQQnSaCP6ny3xa8qLH-QUgYqdQuoA_LF1phxgRCUfIrCLQOkolX5nv3ze_f==

View File

@@ -0,0 +1,13 @@
- op: remove
path: /components/schemas/updateIdentityBody/properties/metadata_admin/type
- op: remove
path: /components/schemas/updateIdentityBody/properties/metadata_public/type
- op: remove
path: /components/schemas/createIdentityBody/properties/metadata_admin/type
- op: remove
path: /components/schemas/createIdentityBody/properties/metadata_public/type
- op: remove
path: /components/schemas/nullJsonRawMessage/type
- op: add
path: /components/schemas/nullJsonRawMessage/nullable
value: true

View File

@@ -0,0 +1,23 @@
- op: replace
path: /info
value:
title: Ory Identities API
description: |
This is the API specification for Ory Identities with features such as registration, login, recovery, account verification, profile settings, password reset, identity management, session management, email and sms delivery, and more.
version: >-
{{ getenv "CIRCLE_TAG" }}
license:
name: Apache 2.0
contact:
email: "office@ory.sh"
- op: replace
path: /tags
value:
- name: identity
description: APIs for managing identities.
- name: frontend
description: Endpoints used by frontend applications (e.g. Single-Page-App, Native Apps, Server Apps, ...) to manage a user's own profile.
- name: courier
description: APIs for managing email and SMS message delivery.
- name: metadata
description: Server Metadata provides relevant information about the running server. Only available when self-hosting this service.

View File

@@ -0,0 +1,37 @@
- op: replace
path: "#/components/schemas/NullUUID"
value:
type: string
format: uuid4
nullable: true
- op: replace
path: "#/components/schemas/NullTime"
value:
format: date-time
type: string
nullable: true
- op: replace
path: "#/components/schemas/Time"
value:
format: date-time
type: string
- op: replace
path: "#/components/schemas/NullString"
value:
type: string
nullable: true
- op: replace
path: "#/components/schemas/NullBool"
value:
type: boolean
nullable: true
- op: replace
path: "#/components/schemas/NullInt"
value:
type: integer
nullable: true
- op: replace
path: "#/components/schemas/nullInt64"
value:
type: integer
nullable: true

View File

@@ -0,0 +1,141 @@
# Makes uiNodeAttributes polymorph
- op: remove
path: /components/schemas/uiNodeAttributes/type
- op: add
path: /components/schemas/uiNodeAttributes/discriminator
value:
propertyName: node_type
mapping:
input: "#/components/schemas/uiNodeInputAttributes"
text: "#/components/schemas/uiNodeTextAttributes"
img: "#/components/schemas/uiNodeImageAttributes"
a: "#/components/schemas/uiNodeAnchorAttributes"
script: "#/components/schemas/uiNodeScriptAttributes"
div: "#/components/schemas/uiNodeDivisionAttributes"
- op: add
path: /components/schemas/uiNodeAttributes/oneOf
value:
- "$ref": "#/components/schemas/uiNodeInputAttributes"
- "$ref": "#/components/schemas/uiNodeTextAttributes"
- "$ref": "#/components/schemas/uiNodeImageAttributes"
- "$ref": "#/components/schemas/uiNodeAnchorAttributes"
- "$ref": "#/components/schemas/uiNodeScriptAttributes"
- "$ref": "#/components/schemas/uiNodeDivisionAttributes"
- op: replace
path: /components/schemas/uiNodeDivisionAttributes/properties/node_type/enum
value:
- div
- op: replace
path: /components/schemas/uiNodeInputAttributes/properties/node_type/enum
value:
- input
- op: replace
path: /components/schemas/uiNodeTextAttributes/properties/node_type/enum
value:
- text
- op: replace
path: /components/schemas/uiNodeImageAttributes/properties/node_type/enum
value:
- img
- op: replace
path: /components/schemas/uiNodeAnchorAttributes/properties/node_type/enum
value:
- a
- op: replace
path: /components/schemas/uiNodeScriptAttributes/properties/node_type/enum
value:
- script
# Makes the uiNodeInputAttributes value attribute polymorph
- op: add
path: /components/schemas/uiNodeInputAttributes/properties/value/nullable
value: true
- op: replace
path: /components/schemas/flowError/properties/error
value:
type: object
- op: remove
path: "#/components/schemas/identityTraits/type"
- op: add
path: /components/schemas/continueWith/discriminator
value:
propertyName: action
mapping:
show_verification_ui: "#/components/schemas/continueWithVerificationUi"
set_ory_session_token: "#/components/schemas/continueWithSetOrySessionToken"
show_settings_ui: "#/components/schemas/continueWithSettingsUi"
show_recovery_ui: "#/components/schemas/continueWithRecoveryUi"
redirect_browser_to: "#/components/schemas/continueWithRedirectBrowserTo"
show_pin_entry_ui: "#/components/schemas/continueWithDeviceAuthnPinEntryUi"
- op: add
path: /components/schemas/continueWith/oneOf
value:
- "$ref": "#/components/schemas/continueWithVerificationUi"
- "$ref": "#/components/schemas/continueWithSetOrySessionToken"
- "$ref": "#/components/schemas/continueWithSettingsUi"
- "$ref": "#/components/schemas/continueWithRecoveryUi"
- "$ref": "#/components/schemas/continueWithRedirectBrowserTo"
- "$ref": "#/components/schemas/continueWithDeviceAuthnPinEntryUi"
# DeviceAuthn: constrain UserVerification to its known values. go-swagger renders
# the `type UserVerification string` alias as a plain string, so the enum is
# pinned here. The valid values are pin, platform, and none.
- op: add
path: /components/schemas/UserVerification/enum
value:
- pin
- platform
- none
# DeviceAuthn: constrain KeyState and DeviceType to their known values, for the
# same reason as UserVerification above.
- op: add
path: /components/schemas/KeyState/enum
value:
- initial
- confirmed
- locked
- op: add
path: /components/schemas/DeviceType/enum
value:
- Android
- iOS
# Without explicit variable names, generators derive the "iOS" identifier as
# I_OS / IOs. The names apply verbatim in every generated language.
- op: add
path: /components/schemas/DeviceType/x-enum-varnames
value:
- ANDROID
- IOS
# DeviceAuthn: the at-rest pin_secret ciphertext is server-internal and must
# never be returned to clients. Mark it write-only so the SDK and docs flag it
# as not-readable (Swagger 2.0 cannot express writeOnly, so this lands in the
# OpenAPI 3.0 spec only).
- op: add
path: /components/schemas/PINConfig/properties/pin_secret/writeOnly
value: true
# DeviceAuthn: attach a description to the `data` property. go-swagger
# drops a description next to a bare $ref, so wrap the $ref in allOf to keep the
# reference and carry the description.
- op: replace
path: /components/schemas/continueWithDeviceAuthnPinEntryUi/properties/data
value:
description: >-
The one-time HPKE-sealed pin_secret material the device opens to bind the
user's PIN after a PIN-protected DeviceAuthn enrollment or secret rotation.
allOf:
- "$ref": "#/components/schemas/continueWithDeviceAuthnPinEntryUiData"

View File

@@ -0,0 +1,3 @@
- op: replace
path: /components/schemas/genericError/properties/details/additionalProperties
value: false

View File

@@ -0,0 +1,187 @@
# Makes updateLoginFlowPayload polymorph
#- op: remove
# path: /components/schemas/updateLoginFlowBody/type
#- op: add
# path: /components/schemas/updateLoginFlowBody/oneOf
# value:
# - "$ref": "#/components/schemas/updateLoginFlowWithPasswordMethod"
# Makes updateRegistrationFlowPayload polymorph
# All modifications for the registration flow
- op: remove
path: /components/schemas/updateRegistrationFlowBody/type
- op: add
path: /components/schemas/updateRegistrationFlowBody/oneOf
value:
- "$ref": "#/components/schemas/updateRegistrationFlowWithPasswordMethod"
- "$ref": "#/components/schemas/updateRegistrationFlowWithOidcMethod"
- "$ref": "#/components/schemas/updateRegistrationFlowWithSamlMethod"
- "$ref": "#/components/schemas/updateRegistrationFlowWithWebAuthnMethod"
- "$ref": "#/components/schemas/updateRegistrationFlowWithCodeMethod"
- "$ref": "#/components/schemas/updateRegistrationFlowWithPasskeyMethod"
- "$ref": "#/components/schemas/updateRegistrationFlowWithProfileMethod"
- op: add
path: /components/schemas/updateRegistrationFlowBody/discriminator
value:
propertyName: method
mapping:
password: "#/components/schemas/updateRegistrationFlowWithPasswordMethod"
oidc: "#/components/schemas/updateRegistrationFlowWithOidcMethod"
saml: "#/components/schemas/updateRegistrationFlowWithSamlMethod"
webauthn: "#/components/schemas/updateRegistrationFlowWithWebAuthnMethod"
code: "#/components/schemas/updateRegistrationFlowWithCodeMethod"
passkey: "#/components/schemas/updateRegistrationFlowWithPasskeyMethod"
profile: "#/components/schemas/updateRegistrationFlowWithProfileMethod"
- op: add
path: /components/schemas/registrationFlowState
value:
title: Registration flow state (experimental)
description: The experimental state represents the state of a registration flow. This field is EXPERIMENTAL and subject to change!
type: string
enum:
- choose_method
- sent_email
- passed_challenge
# end
# All modifications for the login flow
- op: remove
path: /components/schemas/updateLoginFlowBody/type
- op: add
path: /components/schemas/updateLoginFlowBody/oneOf
value:
- "$ref": "#/components/schemas/updateLoginFlowWithPasswordMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithOidcMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithSamlMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithTotpMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithWebAuthnMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithLookupSecretMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithCodeMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithPasskeyMethod"
- "$ref": "#/components/schemas/updateLoginFlowWithIdentifierFirstMethod"
- op: add
path: /components/schemas/updateLoginFlowBody/discriminator
value:
propertyName: method
mapping:
password: "#/components/schemas/updateLoginFlowWithPasswordMethod"
oidc: "#/components/schemas/updateLoginFlowWithOidcMethod"
saml: "#/components/schemas/updateLoginFlowWithSamlMethod"
totp: "#/components/schemas/updateLoginFlowWithTotpMethod"
webauthn: "#/components/schemas/updateLoginFlowWithWebAuthnMethod"
lookup_secret: "#/components/schemas/updateLoginFlowWithLookupSecretMethod"
code: "#/components/schemas/updateLoginFlowWithCodeMethod"
passkey: "#/components/schemas/updateLoginFlowWithPasskeyMethod"
identifier_first: "#/components/schemas/updateLoginFlowWithIdentifierFirstMethod"
- op: add
path: /components/schemas/loginFlowState
value:
title: Login flow state (experimental)
description: The experimental state represents the state of a login flow. This field is EXPERIMENTAL and subject to change!
type: string
enum:
- choose_method
- sent_email
- passed_challenge
# end
# All modifications for the recovery flow
- op: remove
path: /components/schemas/updateRecoveryFlowBody/type
- op: add
path: /components/schemas/updateRecoveryFlowBody/oneOf
value:
- "$ref": "#/components/schemas/updateRecoveryFlowWithLinkMethod"
- "$ref": "#/components/schemas/updateRecoveryFlowWithCodeMethod"
- op: add
path: /components/schemas/updateRecoveryFlowBody/discriminator
value:
propertyName: method
mapping:
link: "#/components/schemas/updateRecoveryFlowWithLinkMethod"
code: "#/components/schemas/updateRecoveryFlowWithCodeMethod"
- op: add
path: /components/schemas/recoveryFlowState
type: string
value:
title: Recovery flow state (experimental)
description: The experimental state represents the state of a recovery flow. This field is EXPERIMENTAL and subject to change!
enum:
- choose_method
- sent_email
- passed_challenge
# End
# All modifications for the verification flow
- op: remove
path: /components/schemas/updateVerificationFlowBody/type
- op: add
path: /components/schemas/updateVerificationFlowBody/oneOf
value:
- "$ref": "#/components/schemas/updateVerificationFlowWithLinkMethod"
- "$ref": "#/components/schemas/updateVerificationFlowWithCodeMethod"
- op: add
path: /components/schemas/updateVerificationFlowBody/discriminator
value:
propertyName: method
mapping:
link: "#/components/schemas/updateVerificationFlowWithLinkMethod"
code: "#/components/schemas/updateVerificationFlowWithCodeMethod"
- op: add
path: /components/schemas/verificationFlowState
type: string
value:
title: Verification flow state (experimental)
description: The experimental state represents the state of a verification flow. This field is EXPERIMENTAL and subject to change!
enum:
- choose_method
- sent_email
- passed_challenge
# End
# All modifications for the settings flow
- op: remove
path: /components/schemas/updateSettingsFlowBody/type
- op: add
path: /components/schemas/updateSettingsFlowBody/oneOf
value:
- "$ref": "#/components/schemas/updateSettingsFlowWithPasswordMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithProfileMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithOidcMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithSamlMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithTotpMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithWebAuthnMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithLookupMethod"
- "$ref": "#/components/schemas/updateSettingsFlowWithPasskeyMethod"
- op: add
path: /components/schemas/updateSettingsFlowBody/discriminator
value:
propertyName: method
mapping:
password: "#/components/schemas/updateSettingsFlowWithPasswordMethod"
profile: "#/components/schemas/updateSettingsFlowWithProfileMethod"
oidc: "#/components/schemas/updateSettingsFlowWithOidcMethod"
saml: "#/components/schemas/updateSettingsFlowWithSamlMethod"
totp: "#/components/schemas/updateSettingsFlowWithTotpMethod"
webauthn: "#/components/schemas/updateSettingsFlowWithWebAuthnMethod"
passkey: "#/components/schemas/updateSettingsFlowWithPasskeyMethod"
lookup_secret: "#/components/schemas/updateSettingsFlowWithLookupMethod"
- op: add
path: /components/schemas/settingsFlowState
value:
title: Settings flow state (experimental)
description: The experimental state represents the state of a settings flow. This field is EXPERIMENTAL and subject to change!
type: string
enum:
- show_form
- success
# end
# Some issues with AdditionalProperties
- op: remove
path: "#/components/schemas/OAuth2LoginRequest/properties/AdditionalProperties"
- op: remove
path: "#/components/schemas/OAuth2ConsentRequestOpenIDConnectContext/properties/AdditionalProperties"
- op: remove
path: "#/components/schemas/OAuth2Client/properties/AdditionalProperties"

View File

@@ -0,0 +1,13 @@
- op: add
path: /paths/~1sessions~1whoami/get/parameters/0/example
value: MP2YWEMeM8MxjkGKpH4dqOQ4Q4DlSPaj
- op: add
path: /paths/~1sessions~1whoami/get/parameters/1/example
value: ory_kratos_session=a19iOVAbdzdgl70Rq1QZmrKmcjDtdsviCTZx7m9a9yHIUS8Wa9T7hvqyGTsLHi6Qifn2WUfpAKx9DWp0SJGleIn9vh2YF4A16id93kXFTgIgmwIOvbVAScyrx7yVl6bPZnCx27ec4WQDtaTewC1CpgudeDV2jQQnSaCP6ny3xa8qLH-QUgYqdQuoA_LF1phxgRCUfIrCLQOkolX5nv3ze_f==
- op: add
path: /components/schemas/authenticatorAssuranceLevel/enum
value:
- aal0
- aal1
- aal2
- aal3