snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/flow/settings/test/persistence.go

@@ -0,0 +1,260 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package test
+
+import (
+	"context"
+	"encoding/json"
+	"fmt"
+	"testing"
+	"time"
+
+	"github.com/ory/kratos/identity"
+	"github.com/ory/kratos/pkg/testhelpers"
+
+	"github.com/ory/kratos/persistence"
+	"github.com/ory/kratos/selfservice/flow"
+	"github.com/ory/kratos/selfservice/flow/settings"
+	"github.com/ory/x/sqlcon"
+
+	"github.com/ory/x/assertx"
+
+	"github.com/ory/kratos/ui/node"
+
+	"github.com/go-faker/faker/v4"
+	"github.com/gofrs/uuid"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+
+	"github.com/ory/kratos/x"
+)
+
+func clearids(r *settings.Flow) {
+	r.ID = uuid.Nil
+	r.Identity.ID = uuid.Nil
+	r.IdentityID = uuid.Nil
+}
+
+func TestFlowPersister(ctx context.Context, p persistence.Persister) func(t *testing.T) {
+	return func(t *testing.T) {
+		_, p := testhelpers.NewNetworkUnlessExisting(t, ctx, p)
+
+		t.Run("case=should error when the settings request does not exist", func(t *testing.T) {
+			_, err := p.GetSettingsFlow(ctx, x.NewUUID())
+			require.Error(t, err)
+		})
+
+		newFlow := func(t *testing.T) *settings.Flow {
+			var r settings.Flow
+			require.NoError(t, faker.FakeData(&r))
+			clearids(&r)
+			require.NoError(t, p.CreateIdentity(ctx, r.Identity))
+			require.NotZero(t, r.Identity.ID)
+			r.IdentityID = r.Identity.ID
+			r.State = flow.StateShowForm
+			return &r
+		}
+
+		t.Run("case=should create a new settings request", func(t *testing.T) {
+			r := newFlow(t)
+			err := p.CreateSettingsFlow(ctx, r)
+			require.NoError(t, err, "%#v", err)
+
+			t.Run("can not fetch on another network", func(t *testing.T) {
+				_, p := testhelpers.NewNetwork(t, ctx, p)
+				_, err := p.GetSettingsFlow(ctx, r.ID)
+				require.ErrorIs(t, err, sqlcon.ErrNoRows())
+			})
+		})
+
+		t.Run("case=should create and update and properly deal with internal context", func(t *testing.T) {
+			for k, tc := range []struct {
+				in     []byte
+				expect string
+			}{
+				{in: []byte("[]"), expect: "{}"},
+				{expect: "{}"},
+				{in: []byte("null"), expect: "{}"},
+				{in: []byte(`{"foo":"bar"}`), expect: `{"foo":"bar"}`},
+			} {
+				t.Run(fmt.Sprintf("run=%d", k), func(t *testing.T) {
+					r := newFlow(t)
+					r.InternalContext = tc.in
+					require.NoError(t, p.CreateSettingsFlow(ctx, r))
+					assert.Equal(t, tc.expect, string(r.InternalContext))
+
+					r.InternalContext = tc.in
+					require.NoError(t, p.UpdateSettingsFlow(ctx, r))
+					assert.Equal(t, tc.expect, string(r.InternalContext))
+				})
+			}
+		})
+
+		t.Run("case=should ensure that internal context is an object", func(t *testing.T) {
+			r := newFlow(t)
+			r.InternalContext = []byte("null")
+			require.NoError(t, p.CreateSettingsFlow(ctx, r))
+			assert.Equal(t, "{}", string(r.InternalContext))
+
+			r.InternalContext = nil
+			require.NoError(t, p.UpdateSettingsFlow(ctx, r))
+			assert.Equal(t, "{}", string(r.InternalContext))
+		})
+
+		t.Run("case=should create with set ids", func(t *testing.T) {
+			var r settings.Flow
+			require.NoError(t, faker.FakeData(&r))
+			r.State = flow.StateShowForm
+			require.NoError(t, p.CreateIdentity(ctx, r.Identity))
+			require.NoError(t, p.CreateSettingsFlow(ctx, &r))
+
+			require.NotEmpty(t, r.Identity)
+			t.Run("can not fetch on another network", func(t *testing.T) {
+				_, p := testhelpers.NewNetwork(t, ctx, p)
+				_, err := p.GetSettingsFlow(ctx, r.ID)
+				require.ErrorIs(t, err, sqlcon.ErrNoRows())
+			})
+		})
+
+		t.Run("case=should create and fetch a settings request", func(t *testing.T) {
+			expected := newFlow(t)
+			err := p.CreateSettingsFlow(ctx, expected)
+			require.NoError(t, err)
+
+			actual, err := p.GetSettingsFlow(ctx, expected.ID)
+			require.NoError(t, err)
+
+			factual, _ := json.Marshal(actual.UI)
+			fexpected, _ := json.Marshal(expected.UI)
+
+			require.NotEmpty(t, actual.UI.Action)
+			assert.EqualValues(t, expected.ID, actual.ID)
+			assert.JSONEq(t, string(fexpected), string(factual))
+			x.AssertEqualTime(t, expected.IssuedAt, actual.IssuedAt)
+			x.AssertEqualTime(t, expected.ExpiresAt, actual.ExpiresAt)
+			assert.EqualValues(t, expected.RequestURL, actual.RequestURL)
+			assert.EqualValues(t, expected.Identity.ID, actual.Identity.ID)
+			assert.EqualValues(t, expected.Identity.Traits, actual.Identity.Traits)
+			assert.EqualValues(t, expected.Identity.SchemaID, actual.Identity.SchemaID)
+			assert.Empty(t, actual.Identity.Credentials)
+		})
+
+		t.Run("case=should fail to create if identity does not exist", func(t *testing.T) {
+			var expected settings.Flow
+			require.NoError(t, faker.FakeData(&expected))
+			clearids(&expected)
+			expected.Identity = nil
+			expected.IdentityID = uuid.Nil
+			expected.State = flow.StateShowForm
+			err := p.CreateSettingsFlow(ctx, &expected)
+			require.Errorf(t, err, "%+v", expected)
+		})
+
+		t.Run("case=should create and update a settings request", func(t *testing.T) {
+			expected := newFlow(t)
+			expected.UI.Nodes = node.Nodes{}
+			expected.UI.Nodes.Append(node.NewInputField("zab", nil, node.DefaultGroup, "bar", node.WithInputAttributes(func(a *node.InputAttributes) {
+				a.Pattern = "baz"
+			})))
+
+			expected.UI.Nodes.Append(node.NewInputField("foo", nil, node.DefaultGroup, "bar", node.WithInputAttributes(func(a *node.InputAttributes) {
+				a.Pattern = "baz"
+			})))
+
+			err := p.CreateSettingsFlow(ctx, expected)
+			require.NoError(t, err)
+
+			expected.UI.Action = "/new-action"
+			expected.UI.Nodes.Append(
+				node.NewInputField("zab", nil, node.DefaultGroup, "zab", node.WithInputAttributes(func(a *node.InputAttributes) {
+					a.Pattern = "zab"
+				})))
+
+			expected.RequestURL = "/new-request-url"
+			require.NoError(t, p.UpdateSettingsFlow(ctx, expected))
+
+			actual, err := p.GetSettingsFlow(ctx, expected.ID)
+			require.NoError(t, err)
+
+			assert.Equal(t, "/new-action", actual.UI.Action)
+			assert.Equal(t, "/new-request-url", actual.RequestURL)
+			assertx.EqualAsJSON(t, node.Nodes{
+				// v0.5: {Name: "zab", Type: "zab", Pattern: "zab"},
+				node.NewInputField("zab", nil, node.DefaultGroup, "bar", node.WithInputAttributes(func(a *node.InputAttributes) {
+					a.Pattern = "baz"
+				})),
+				node.NewInputField("foo", nil, node.DefaultGroup, "bar", node.WithInputAttributes(func(a *node.InputAttributes) {
+					a.Pattern = "baz"
+				})),
+				// v0.5: {Name: "zab", Type: "bar", Pattern: "baz"},
+				node.NewInputField("zab", nil, node.DefaultGroup, "zab", node.WithInputAttributes(func(a *node.InputAttributes) {
+					a.Pattern = "zab"
+				})),
+			}, actual.UI.Nodes)
+		})
+
+		t.Run("case=network", func(t *testing.T) {
+			id := x.NewUUID()
+			iid := x.NewUUID()
+			nid, p := testhelpers.NewNetwork(t, ctx, p)
+
+			require.NoError(t, p.CreateIdentity(ctx, &identity.Identity{ID: iid}))
+
+			t.Run("sets id on creation", func(t *testing.T) {
+				expected := &settings.Flow{ID: id, IdentityID: iid, State: flow.StateShowForm, IssuedAt: time.Now(), ExpiresAt: time.Now().Add(time.Hour)}
+				require.NoError(t, p.CreateSettingsFlow(ctx, expected))
+				assert.EqualValues(t, id, expected.ID)
+				assert.EqualValues(t, nid, expected.NID)
+
+				actual, err := p.GetSettingsFlow(ctx, id)
+				require.NoError(t, err)
+				assert.EqualValues(t, id, actual.ID)
+				assert.EqualValues(t, nid, actual.NID)
+
+				_, err = p.GetSettingsFlow(ctx, id)
+				require.NoError(t, err)
+			})
+
+			t.Run("can not update id", func(t *testing.T) {
+				expected, err := p.GetSettingsFlow(ctx, id)
+				require.NoError(t, err)
+
+				_, other := testhelpers.NewNetwork(t, ctx, p)
+
+				expected.RequestURL = "updated"
+				require.ErrorIs(t, other.UpdateSettingsFlow(ctx, expected), sqlcon.ErrNoRows())
+
+				actual, err := p.GetSettingsFlow(ctx, id)
+				require.NoError(t, err)
+				assert.EqualValues(t, id, actual.ID)
+				assert.EqualValues(t, nid, actual.NID)
+				require.NotEqual(t, "updated", actual.RequestURL)
+			})
+
+			t.Run("can not get on another network", func(t *testing.T) {
+				_, p := testhelpers.NewNetwork(t, ctx, p)
+				_, err := p.GetSettingsFlow(ctx, id)
+				require.ErrorIs(t, err, sqlcon.ErrNoRows())
+			})
+
+			t.Run("network isolation", func(t *testing.T) {
+				nid2, _ := testhelpers.NewNetwork(t, ctx, p)
+				nid1, p := testhelpers.NewNetwork(t, ctx, p)
+
+				iid1, iid2 := x.NewUUID(), x.NewUUID()
+				require.NoError(t, p.GetConnection(ctx).RawQuery("INSERT INTO identities (id, nid, schema_id, traits, created_at, updated_at) VALUES (?, ?, 'default', '{}', ?, ?)", iid1, nid1, time.Now(), time.Now()).Exec())
+				require.NoError(t, p.GetConnection(ctx).RawQuery("INSERT INTO identities (id, nid, schema_id, traits, created_at, updated_at) VALUES (?, ?, 'default', '{}', ?, ?)", iid2, nid2, time.Now(), time.Now()).Exec())
+
+				sid1, sid2 := x.NewUUID(), x.NewUUID()
+				require.NoError(t, p.GetConnection(ctx).RawQuery("INSERT INTO selfservice_settings_flows (id, nid, identity_id, ui, created_at, updated_at, expires_at, request_url, internal_context) VALUES (?, ?, ?, '{}', ?, ?, ?, '', '{}')", sid1, nid1, iid1, time.Now(), time.Now(), time.Now().Add(time.Hour)).Exec())
+				require.NoError(t, p.GetConnection(ctx).RawQuery("INSERT INTO selfservice_settings_flows (id, nid, identity_id, ui, created_at, updated_at, expires_at, request_url, internal_context) VALUES (?, ?, ?, '{}', ?, ?, ?, '', '{}')", sid2, nid2, iid2, time.Now(), time.Now(), time.Now().Add(time.Hour)).Exec())
+
+				_, err := p.GetSettingsFlow(ctx, sid1)
+				require.NoError(t, err)
+				_, err = p.GetSettingsFlow(ctx, sid2)
+				require.ErrorIs(t, err, sqlcon.ErrNoRows())
+			})
+		})
+	}
+}