snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/hook/show_verification_ui_test.go

@@ -0,0 +1,227 @@
+// Copyright © 2023 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package hook_test
+
+import (
+	"context"
+	"encoding/json"
+	"net/http/httptest"
+	"testing"
+
+	"github.com/gofrs/uuid"
+	"github.com/stretchr/testify/assert"
+	"github.com/stretchr/testify/require"
+
+	"github.com/ory/kratos/driver/config"
+	"github.com/ory/kratos/pkg"
+	"github.com/ory/kratos/selfservice/flow"
+	"github.com/ory/kratos/selfservice/flow/login"
+	"github.com/ory/kratos/selfservice/flow/registration"
+	"github.com/ory/kratos/selfservice/flow/verification"
+	"github.com/ory/kratos/selfservice/hook"
+)
+
+func TestExecutePostRegistrationPostPersistHook(t *testing.T) {
+	t.Run("flow=registration", func(t *testing.T) {
+		t.Run("case=no continue with items returns 200 OK", func(t *testing.T) {
+			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			f := &registration.Flow{}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, f, nil))
+			require.Equal(t, 200, rec.Code)
+		})
+
+		t.Run("case=not a browser request returns 200 OK", func(t *testing.T) {
+			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			browserRequest.Header.Add("Accept", "application/json")
+			f := &registration.Flow{}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, f, nil))
+			require.Equal(t, 200, rec.Code)
+		})
+
+		t.Run("case=verification ui in continue with item returns redirect", func(t *testing.T) {
+			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			vf := &verification.Flow{
+				ID: uuid.Must(uuid.NewV4()),
+			}
+			rf := &registration.Flow{}
+			rf.ContinueWithItems = []flow.ContinueWith{
+				flow.NewContinueWithVerificationUI(vf.ID, "some@ory.sh", ""),
+			}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil))
+			assert.Equal(t, 200, rec.Code)
+			assert.Equal(t, "/verification?flow="+vf.ID.String(), rf.ReturnToVerification)
+		})
+
+		t.Run("case=no verification ui in continue with item returns 200 OK", func(t *testing.T) {
+			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			rf := &registration.Flow{}
+			rf.ContinueWithItems = []flow.ContinueWith{
+				flow.NewContinueWithSetToken("token"),
+			}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil))
+			assert.Equal(t, 200, rec.Code)
+		})
+	})
+
+	t.Run("flow=login", func(t *testing.T) {
+		t.Run("case=no continue with items returns 200 OK", func(t *testing.T) {
+			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			f := &login.Flow{}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", f, nil))
+			require.Equal(t, 200, rec.Code)
+		})
+
+		t.Run("case=not a browser request returns 200 OK", func(t *testing.T) {
+			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			browserRequest.Header.Add("Accept", "application/json")
+			f := &login.Flow{}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", f, nil))
+			require.Equal(t, 200, rec.Code)
+		})
+
+		t.Run("case=verification ui in continue with item returns redirect", func(t *testing.T) {
+			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			vf := &verification.Flow{
+				ID: uuid.Must(uuid.NewV4()),
+			}
+			rf := &login.Flow{}
+			rf.ContinueWithItems = []flow.ContinueWith{
+				flow.NewContinueWithVerificationUI(vf.ID, "some@ory.sh", ""),
+			}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", rf, nil))
+			assert.Equal(t, 200, rec.Code)
+			assert.Equal(t, "/verification?flow="+vf.ID.String(), rf.ReturnToVerification)
+		})
+
+		t.Run("case=no verification ui in continue with item returns 200 OK", func(t *testing.T) {
+			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			rf := &login.Flow{}
+			rf.ContinueWithItems = []flow.ContinueWith{
+				flow.NewContinueWithSetToken("token"),
+			}
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", rf, nil))
+			assert.Equal(t, 200, rec.Code)
+		})
+	})
+
+	t.Run("internal_context=registration", func(t *testing.T) {
+		t.Run("case=verification flow from internal context returns redirect", func(t *testing.T) {
+			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			vfID := uuid.Must(uuid.NewV4())
+
+			cw := flow.ContinueWithVerificationUIFlow{
+				ID:                vfID,
+				VerifiableAddress: "test@ory.sh",
+			}
+
+			internalContext, err := json.Marshal(map[string]interface{}{
+				hook.InternalContextRegistrationVerificationFlow: cw,
+			})
+			require.NoError(t, err)
+
+			rf := &registration.Flow{}
+			rf.InternalContext = internalContext
+
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil))
+			assert.Equal(t, 200, rec.Code)
+			assert.Equal(t, "/verification?flow="+vfID.String(), rf.ReturnToVerification)
+		})
+
+		t.Run("case=invalid json in internal context returns error", func(t *testing.T) {
+			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+
+			internalContext, err := json.Marshal(map[string]interface{}{
+				hook.InternalContextRegistrationVerificationFlow: "invalid json",
+			})
+			require.NoError(t, err)
+
+			rf := &registration.Flow{}
+			rf.InternalContext = internalContext
+
+			rec := httptest.NewRecorder()
+			err = h.ExecutePostRegistrationPostPersistHook(rec, browserRequest, rf, nil)
+			require.Error(t, err)
+		})
+	})
+
+	t.Run("internal_context=login", func(t *testing.T) {
+		t.Run("case=verification flow from internal context returns redirect", func(t *testing.T) {
+			conf, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			conf.MustSet(context.Background(), config.ViperKeySelfServiceVerificationUI, "/verification")
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+			vfID := uuid.Must(uuid.NewV4())
+
+			cw := flow.ContinueWithVerificationUIFlow{
+				ID:                vfID,
+				VerifiableAddress: "test@ory.sh",
+			}
+
+			internalContext, err := json.Marshal(map[string]interface{}{
+				hook.InternalContextRegistrationVerificationFlow: cw,
+			})
+			require.NoError(t, err)
+
+			lf := &login.Flow{}
+			lf.InternalContext = internalContext
+
+			rec := httptest.NewRecorder()
+			require.NoError(t, h.ExecuteLoginPostHook(rec, browserRequest, "", lf, nil))
+			assert.Equal(t, 200, rec.Code)
+			assert.Equal(t, "/verification?flow="+vfID.String(), lf.ReturnToVerification)
+		})
+
+		t.Run("case=invalid json in internal context returns error", func(t *testing.T) {
+			_, reg := pkg.NewVeryFastRegistryWithoutDB(t)
+			h := hook.NewShowVerificationUIHook(reg)
+			browserRequest := httptest.NewRequest("GET", "/", nil)
+
+			internalContext, err := json.Marshal(map[string]interface{}{
+				hook.InternalContextRegistrationVerificationFlow: "invalid json",
+			})
+			require.NoError(t, err)
+
+			lf := &login.Flow{}
+			lf.InternalContext = internalContext
+
+			rec := httptest.NewRecorder()
+			err = h.ExecuteLoginPostHook(rec, browserRequest, "", lf, nil)
+			require.Error(t, err)
+		})
+	})
+}