snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

test/e2e/profiles/oidc/.kratos.yml

@@ -0,0 +1,72 @@
+selfservice:
+  methods:
+    oidc:
+      enabled: true
+      config:
+        providers:
+          - id: hydra
+            label: Ory
+            provider: generic
+            client_id: ${OIDC_HYDRA_CLIENT_ID}
+            client_secret: ${OIDC_HYDRA_CLIENT_SECRET}
+            issuer_url: http://localhost:4444/
+            scope:
+              - offline
+            mapper_url: file://test/e2e/profiles/oidc/hydra.jsonnet
+          - id: google
+            provider: generic
+            client_id: ${OIDC_GOOGLE_CLIENT_ID}
+            client_secret: ${OIDC_GOOGLE_CLIENT_SECRET}
+            issuer_url: http://localhost:4444/
+            scope:
+              - offline
+            mapper_url: file://test/e2e/profiles/oidc/hydra.jsonnet
+          - id: github
+            provider: generic
+            client_id: ${OIDC_GITHUB_CLIENT_ID}
+            client_secret: ${OIDC_GITHUB_CLIENT_SECRET}
+            issuer_url: http://localhost:4444/
+            scope:
+              - offline
+            mapper_url: file://test/e2e/profiles/oidc/hydra.jsonnet
+
+  flows:
+    settings:
+      privileged_session_max_age: 5m
+      ui_url: http://localhost:4455/settings
+
+    logout:
+      after:
+        default_browser_return_url: http://localhost:4455/login
+
+    registration:
+      enable_legacy_one_step: true
+      ui_url: http://localhost:4455/registration
+      after:
+        password:
+          hooks:
+            - hook: session
+        oidc:
+          hooks:
+            - hook: session
+    login:
+      ui_url: http://localhost:4455/login
+    error:
+      ui_url: http://localhost:4455/error
+    verification:
+      ui_url: http://localhost:4455/verify
+    recovery:
+      ui_url: http://localhost:4455/recovery
+
+identity:
+  schemas:
+    - id: default
+      url: file://test/e2e/profiles/oidc/identity.traits.schema.json
+
+secrets:
+  cipher:
+    - secret-thirty-two-character-long
+
+session:
+  whoami:
+    required_aal: aal1

test/e2e/profiles/oidc/hydra.jsonnet

@@ -0,0 +1,13 @@
+local claims = std.extVar('claims');
+
+if std.length(claims.sub) == 0 then
+  error 'claim sub not set'
+else
+  {
+    identity: {
+      traits: {
+        email: claims.sub,
+        [if "website" in claims then "website" else null]: claims.website
+      },
+    },
+  }

test/e2e/profiles/oidc/identity-required.traits.schema.json

@@ -0,0 +1,80 @@
+{
+  "$id": "https://schemas.ory.sh/presets/kratos/quickstart/email-password/identity.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Person",
+  "type": "object",
+  "properties": {
+    "traits": {
+      "type": "object",
+      "properties": {
+        "email": {
+          "type": "string",
+          "format": "email",
+          "title": "E-Mail",
+          "minLength": 3,
+          "ory.sh/kratos": {
+            "credentials": {
+              "password": {
+                "identifier": true
+              },
+              "webauthn": {
+                "identifier": true
+              },
+              "code": {
+                "identifier": true,
+                "via": "email"
+              }
+            }
+          }
+        },
+        "website": {
+          "title": "Website",
+          "type": "string",
+          "format": "uri",
+          "minLength": 10
+        },
+        "consent": {
+          "title": "Consent",
+          "type": "boolean"
+        },
+        "newsletter": {
+          "title": "Newsletter",
+          "type": "boolean"
+        },
+        "nested": {
+          "type": "object",
+          "properties": {
+            "b": {
+              "title": " optional B",
+              "type": "string"
+            }
+          }
+        },
+        "requirednested": {
+          "title": "required nested",
+          "type": "object",
+          "properties": {
+            "a": {
+              "title": "Required A",
+              "const": true
+            },
+            "b": {
+              "title": "Required optional B",
+              "type": "string"
+            }
+          },
+          "required": [
+            "a"
+          ]
+        }
+      },
+      "required": [
+        "email",
+        "website",
+        "requirednested",
+        "consent"
+      ],
+      "additionalProperties": false
+    }
+  }
+}

test/e2e/profiles/oidc/identity.traits.schema.json

@@ -0,0 +1,52 @@
+{
+  "$id": "https://schemas.ory.sh/presets/kratos/quickstart/email-password/identity.schema.json",
+  "$schema": "http://json-schema.org/draft-07/schema#",
+  "title": "Person",
+  "type": "object",
+  "properties": {
+    "traits": {
+      "type": "object",
+      "properties": {
+        "email": {
+          "type": "string",
+          "format": "email",
+          "title": "E-Mail",
+          "minLength": 3,
+          "ory.sh/kratos": {
+            "credentials": {
+              "password": {
+                "identifier": true
+              },
+              "webauthn": {
+                "identifier": true
+              },
+              "code": {
+                "identifier": true,
+                "via": "email"
+              }
+            },
+            "verification": {
+              "via": "email"
+            }
+          }
+        },
+        "website": {
+          "title": "Website",
+          "type": "string",
+          "format": "uri",
+          "minLength": 10
+        },
+        "consent": {
+          "title": "Consent",
+          "type": "boolean"
+        },
+        "newsletter": {
+          "title": "Newsletter",
+          "type": "boolean"
+        }
+      },
+      "required": ["email", "website"],
+      "additionalProperties": false
+    }
+  }
+}