snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/flowhelpers/login.go

@@ -0,0 +1,36 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package flowhelpers
+
+import (
+	"net/http"
+
+	"github.com/ory/kratos/identity"
+	"github.com/ory/kratos/session"
+)
+
+// GuessForcedLoginIdentifier returns the identifier for login flows where the identity needs to refresh the session.
+func GuessForcedLoginIdentifier(r *http.Request, d interface {
+	session.ManagementProvider
+	identity.PrivilegedPoolProvider
+}, f interface {
+	IsRefresh() bool
+}, ct identity.CredentialsType) (identifier string, id *identity.Identity, creds *identity.Credentials) {
+	var ok bool
+	// This block adds the identifier to the method when the request is forced - as a hint for the user.
+	if !f.IsRefresh() {
+		// do nothing
+	} else if sess, err := d.SessionManager().FetchFromRequest(r.Context(), r, session.ExpandNothing, identity.ExpandNothing); err != nil {
+		// do nothing
+	} else if id, err = d.PrivilegedIdentityPool().GetIdentityConfidential(r.Context(), sess.IdentityID); err != nil {
+		// do nothing
+	} else if creds, ok = id.GetCredentials(ct); !ok {
+		// do nothing
+	} else if len(creds.Identifiers) == 0 {
+		// do nothing
+	} else {
+		identifier = creds.Identifiers[0]
+	}
+	return
+}