snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

selfservice/strategy/oidc/export_test.go

@@ -0,0 +1,42 @@
+// Copyright © 2025 Ory Corp
+// SPDX-License-Identifier: Apache-2.0
+
+package oidc
+
+import (
+	"context"
+	"net/http"
+
+	"github.com/gofrs/uuid"
+
+	oidcv1 "github.com/ory/kratos/gen/oidc/v1"
+	"github.com/ory/kratos/selfservice/flow"
+	"github.com/ory/kratos/selfservice/flow/login"
+)
+
+// ValidateFlowForTest exposes the unexported flow resolver so tests in the
+// external oidc_test package can assert that OIDC callback state dispatches
+// to the correct flow kind (login, registration, settings).
+func (s *Strategy) ValidateFlowForTest(ctx context.Context, r *http.Request, rid uuid.UUID, kind oidcv1.FlowKind) (flow.Flow, error) {
+	return s.validateFlow(ctx, r, rid, kind)
+}
+
+// ForwardErrorForTest exposes forwardError so tests can assert that
+// pre-dispatch callback failures finish as a ready flow with a populated
+// DebugPayload instead of panicking.
+func (s *Strategy) ForwardErrorForTest(ctx context.Context, w http.ResponseWriter, r *http.Request, f flow.Flow, err error) {
+	s.forwardError(ctx, w, r, f, err)
+}
+
+// ProcessTestLoginForTest exposes processTestLogin so external tests can
+// exercise the dry-run OIDC callback path without routing through the full
+// callback HTTP pipeline.
+func (s *Strategy) ProcessTestLoginForTest(ctx context.Context, w http.ResponseWriter, r *http.Request, f *login.Flow, claims *Claims, provider Provider) error {
+	return s.processTestLogin(ctx, w, r, f, claims, provider)
+}
+
+// FinishTestLoginForTest exposes finishTestLogin so external tests can
+// assert the idempotency guard against an already-captured DebugPayload.
+func (s *Strategy) FinishTestLoginForTest(ctx context.Context, w http.ResponseWriter, r *http.Request, f *login.Flow, dp *login.DebugPayload) error {
+	return s.finishTestLogin(ctx, w, r, f, dp)
+}