snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/strategy/oidc/.schema/link.schema.json

@@ -0,0 +1,55 @@
+{
+  "$id": "https://schemas.ory.sh/kratos/selfservice/strategy/password/login.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "properties": {
+    "csrf_token": {
+      "type": "string"
+    },
+    "provider": {
+      "type": "string",
+      "minLength": 1
+    },
+    "traits": {
+      "description": "DO NOT DELETE THIS FIELD. This field will be overwritten in login.go's and registration.go's decoder() method. Do not add anything to this field as it has no effect."
+    },
+    "transient_payload": {
+      "type": "object",
+      "additionalProperties": true
+    },
+    "method": {
+      "type": "string"
+    },
+    "upstream_parameters": {
+      "type": "object",
+      "$comment": "Only the defined parameters are allowed. This is to prevent users from sending arbitrary parameters or craft URLs that cause unexpected behavior.",
+      "properties": {
+        "hd": {
+          "description": "The hd (hosted domain) parameter streamlines the login process for G Suite hosted accounts. By including the domain of the G Suite user (for example, mycollege.edu), you can indicate that the account selection UI should be optimized for accounts at that domain.",
+          "type": "string"
+        },
+        "prompt": {
+          "description": "The prompt specifies whether the Authorization Server prompts the End-User for reauthentication and consent (for example, select_account).",
+          "type": "string"
+        },
+        "auth_type": {
+          "description": "The `auth_type` parameter specifies the requested authentication features (as a comma-separated list).",
+          "type": "string"
+        },
+        "acr_values": {
+          "description": "The `acr_values` parameter specifies the Authentication Context Class Reference values for the authorization request.",
+          "type": "string"
+        },
+        "additionalProperties": false
+      }
+    },
+    "id_token": {
+      "type": "string",
+      "description": "An optional id token provided by an OIDC provider"
+    },
+    "id_token_nonce": {
+      "type": "string",
+      "description": "The nonce used when requesting the id_token from the provider. Required, if an id_token is given and the provider supports it."
+    }
+  }
+}

selfservice/strategy/oidc/.schema/settings.schema.json

@@ -0,0 +1,42 @@
+{
+  "$id": "https://schemas.ory.sh/kratos/selfservice/strategy/oidc/.schema/settings.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "type": "object",
+  "properties": {
+    "link": {
+      "type": "string"
+    },
+    "csrf_token": {
+      "type": "string"
+    },
+    "unlink": {
+      "type": "string"
+    },
+    "traits": {
+      "description": "This field will be overwritten in registration.go's decoder() method. Do not add anything to this field as it has no effect."
+    },
+    "upstream_parameters": {
+      "type": "object",
+      "$comment": "Only the defined parameters are allowed. This is to prevent users from sending arbitrary parameters or craft URLs that cause unexpected behavior.",
+      "properties": {
+        "hd": {
+          "description": "The hd (hosted domain) parameter streamlines the login process for G Suite hosted accounts. By including the domain of the G Suite user (for example, mycollege.edu), you can indicate that the account selection UI should be optimized for accounts at that domain.",
+          "type": "string"
+        },
+        "prompt": {
+          "description": "The prompt specifies whether the Authorization Server prompts the End-User for reauthentication and consent (for example, select_account).",
+          "type": "string"
+        },
+        "acr_values": {
+          "description": "The `acr_values` parameter specifies the Authentication Context Class Reference values for the authorization request.",
+          "type": "string"
+        },
+        "additionalProperties": false
+      }
+    },
+    "transient_payload": {
+      "type": "object",
+      "additionalProperties": true
+    }
+  }
+}