snapshot of https://github.com/ory/kratos.git (master, 2026-09-15; blobs > 131072B omitted)

test/schema/fixtures/config.schema.test.failure/OIDCClaims.malformed.yaml

@@ -0,0 +1,18 @@
+userinfo:
+  given_name:
+    essential: true
+    someInvalidProperty: 'invalid' # Invalid property
+  nickname: null
+  email:
+    essential: InvalidValueForEssential
+  email_verified:
+    essentials: true # key typo
+  picture: null
+  http://example/info/claims/groups: null
+id_token:
+  auth_time:
+    essential: true
+  acr:
+    values: ['urn:mace:incommon:iap:silver']
+  sub:
+    value: '248289761001'

test/schema/fixtures/config.schema.test.failure/courierTemplates.bodyHtmlMissing.yaml

@@ -0,0 +1,5 @@
+valid:
+  email:
+    body:
+      plaintext: "https://some-url"
+    subject: "https://some-url"

test/schema/fixtures/config.schema.test.failure/courierTemplates.emailMissing.yaml

@@ -0,0 +1,4 @@
+invalid:
+  another-courier:
+valid:
+  email:

test/schema/fixtures/config.schema.test.failure/emailCourierTemplate.malformed.yaml

@@ -0,0 +1,4 @@
+body:
+  plaintext: "http://call-something"
+  html: "malformed uri"
+subject: "something"

test/schema/fixtures/config.schema.test.failure/root.SMSConfigmalformedURL.yaml

@@ -0,0 +1,5 @@
+sms:
+  request_config:
+    url: "malformed uri"
+    method: POST
+    body: "malformed uri"

test/schema/fixtures/config.schema.test.failure/root.invalidTypes.yaml

@@ -0,0 +1,81 @@
+selfservice:
+
+  strategies:
+    password:
+      enabled: 0
+    oidc:
+      enabled: 0
+      config:
+        providers:
+          - foo
+
+  logout:
+    redirect_to: 0
+
+  profile:
+    lifespan: 10
+
+  login:
+    lifespan: 10
+    before: foo
+    after: foo
+
+  registration:
+    lifespan: 10
+    before:
+      - foo
+    after: foo
+
+dsn: foo
+
+courier:
+  template_override_path: foo
+  smtp:
+    connection_uri: 0
+    from_address: 0
+  message_retries: invalid-value
+
+serve:
+  admin:
+    host: 0
+    port: foo
+  public:
+    host: 0
+    port: foo
+
+urls:
+  self:
+    public: 1
+    admin: 1
+  mfa_ui: 1
+  login_ui: 1
+  settings_ui: 1
+  default_return_to: 1
+  registration_ui: 1
+  error_ui: 1
+  allowed_return_urls:
+    - 1
+    - 1
+
+log:
+  level: 1
+  format: 1
+
+identity:
+  traits:
+    default_schema_id: 1123
+    schemas:
+      - id: 1
+        url: 1
+
+secrets:
+  session:
+    - 1
+
+hashers:
+  argon2:
+    memory: foo
+    iterations: foo
+    parallelism: foo
+    salt_length: foo
+    key_length: foo

test/schema/fixtures/config.schema.test.failure/root.invalidVersion.yaml

@@ -0,0 +1 @@
+version: x1.0.0

test/schema/fixtures/config.schema.test.failure/root.missingCourierTemplatesVerificationInvalid.yaml

@@ -0,0 +1,20 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com
+
+courier:
+  template_override_path: foo
+  smtp:
+    connection_uri: smtps://foo:bar@my-mailserver:1234/
+    from_address: no-reply@ory.kratos.sh
+  templates:
+    recovery: "#/definitions/courierTemplates"
+    verification:
+      valid:
+        email: "#/definitions/emailCourierTemplate"

test/schema/fixtures/config.schema.test.failure/root.requiresCourierRecovery.yml

@@ -0,0 +1,12 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+  flows:
+    recovery:
+      enabled: true
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com

test/schema/fixtures/config.schema.test.failure/root.requiresCourierVerification.yml

@@ -0,0 +1,12 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+  flows:
+    verification:
+      enabled: true
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.invalidTypes.yaml

@@ -0,0 +1,11 @@
+id: 1
+provider: unknown
+client_id: 1
+client_secret: 1
+issuer_url: not an URL
+auth_url: not an URL
+token_url: not an URL
+mapper_url: not an URL
+scope:
+  - 1
+microsoft_tenant: 1

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.privateKeyIdNotWithGithub.yaml

@@ -0,0 +1,6 @@
+id: foo
+provider: github
+client_id: asdf
+client_secret: asdf
+mapper_url: file://./mapper_file
+apple_private_key_id: org

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.privateKeyIdRequiredWithApple.yaml

@@ -0,0 +1,10 @@
+id: foo
+provider: apple
+client_id: foo
+team_id: foo
+private_key: foo
+mapper_url: https://example.com
+scope:
+  - foo
+  - bar
+requested_claims: "#/definitions/OIDCClaims"

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.privateKeyNotWithGithub.yaml

@@ -0,0 +1,6 @@
+id: foo
+provider: github
+client_id: asdf
+client_secret: asdf
+mapper_url: file://./mapper_file
+private_key: org

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.privateKeyRequiredWithApple.yaml

@@ -0,0 +1,10 @@
+id: foo
+provider: apple
+client_id: foo
+apple_team_id: foo
+apple_private_key_id: foo
+mapper_url: https://example.com
+scope:
+  - foo
+  - bar
+requested_claims: "#/definitions/OIDCClaims"

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.teamIdNotWithGithub.yaml

@@ -0,0 +1,6 @@
+id: foo
+provider: github
+client_id: asdf
+client_secret: asdf
+mapper_url: file://./mapper_file
+team_id: org

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.teamIdRequiredWithApple.yaml

@@ -0,0 +1,10 @@
+id: foo
+provider: apple
+client_id: foo
+apple_private_key_id: foo
+apple_private_key: foo
+mapper_url: https://example.com
+scope:
+  - foo
+  - bar
+requested_claims: "#/definitions/OIDCClaims"

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.tenantNotWithGithub.yaml

@@ -0,0 +1,6 @@
+id: foo
+provider: github
+client_id: asdf
+client_secret: asdf
+mapper_url: file://./mapper_file
+microsoft_tenant: org

test/schema/fixtures/config.schema.test.failure/selfServiceOIDCProvider.tenantRequiredWithMicrosoft.yaml

@@ -0,0 +1,5 @@
+id: foo
+provider: microsoft
+client_id: asdf
+client_secret: asdf
+mapper_url: file://./mapper_file

test/schema/fixtures/config.schema.test.success/OIDCClaims.full.yaml

@@ -0,0 +1,18 @@
+userinfo:
+  given_name:
+    essential: true
+  nickname: null
+  email:
+    essential: true
+  email_verified:
+    essential: true
+  picture: null
+  http://example/info/claims/groups: null
+id_token:
+  auth_time:
+    essential: true
+  acr:
+    values: ['urn:mace:incommon:iap:silver']
+  sub:
+    essential: true
+    value: 248289761001

test/schema/fixtures/config.schema.test.success/courierTemplates.full.yaml

@@ -0,0 +1,4 @@
+invalid:
+  email: "#/definitions/emailCourierTemplate"
+valid:
+  email: "#/definitions/emailCourierTemplate"

test/schema/fixtures/config.schema.test.success/defaultReturnTo.URI-Reference.yaml

@@ -0,0 +1 @@
+/dashboard

test/schema/fixtures/config.schema.test.success/defaultReturnTo.URL.yaml

@@ -0,0 +1 @@
+https://my-app.com/dashboard

test/schema/fixtures/config.schema.test.success/emailCourierTemplate.full.yaml

@@ -0,0 +1,4 @@
+body:
+  plaintext: "base64://"
+  html: "base64://"
+subject: "http://"

test/schema/fixtures/config.schema.test.success/emailCourierTemplate.withMissingBody.yaml

@@ -0,0 +1 @@
+subject: "http://"

test/schema/fixtures/config.schema.test.success/emailCourierTemplate.withMissingSubject.yaml

@@ -0,0 +1,3 @@
+body:
+  plaintext: "base64://"
+  html: "base64://"

test/schema/fixtures/config.schema.test.success/root.courierSMS.yaml

@@ -0,0 +1,19 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com
+
+courier:
+  message_retries: 50
+  smtp:
+    connection_uri: smtps://foo:bar@my-mailserver:1234/
+    from_address: no-reply@ory.kratos.sh
+  channels:
+    - id: sms
+      type: http
+      request_config: "#/definitions/httpRequestConfig"

test/schema/fixtures/config.schema.test.success/root.courierTemplates.yaml

@@ -0,0 +1,18 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com
+
+courier:
+  template_override_path: foo
+  smtp:
+    connection_uri: smtps://foo:bar@my-mailserver:1234/
+    from_address: no-reply@ory.kratos.sh
+  templates:
+    recovery: "#/definitions/courierTemplates"
+    verification: "#/definitions/courierTemplates"

test/schema/fixtures/config.schema.test.success/root.full.yml

@@ -0,0 +1,109 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+
+  allowed_return_urls:
+    - https://foo.bar
+    - /dashboard
+
+  flows:
+    settings:
+      ui_url: /settings
+      lifespan: 1h5s
+      privileged_session_max_age: 1h
+      after: "#/definitions/selfServiceAfterSettings"
+
+    logout:
+      after:
+        default_browser_return_url: "#/definitions/defaultReturnTo"
+
+    registration:
+      ui_url: /registration
+      lifespan: 1h
+      after: "#/definitions/selfServiceAfterRegistration"
+
+    login:
+      ui_url: /login
+      lifespan: 1h
+      after: "#/definitions/selfServiceAfterLogin"
+
+    verification:
+      enabled: true
+      ui_url: /verification
+      lifespan: 1h
+      after: "#/definitions/selfServiceAfterVerification"
+
+    recovery:
+      enabled: true
+      ui_url: /recovery
+      lifespan: 1h
+      after: "#/definitions/selfServiceAfterRecovery"
+
+    error:
+      ui_url: /error
+
+  methods:
+    profile:
+      enabled: true
+    link:
+      enabled: true
+    password:
+      enabled: true
+    totp:
+      enabled: true
+      config:
+        issuer: "foobar"
+    oidc:
+      enabled: true
+      config:
+        providers:
+          - "#/definitions/selfServiceOIDCProvider"
+
+dsn: foo
+
+courier:
+  template_override_path: foo
+  smtp:
+    connection_uri: smtps://foo:bar@my-mailserver:1234/
+    from_address: no-reply@ory.kratos.sh
+
+serve:
+  admin:
+    host: foo
+    port: 4434
+  public:
+    host: foo
+    port: 4433
+
+log:
+  level: trace
+  format: json
+
+identity:
+  default_schema_id: foo
+  schemas:
+    - id: foo
+      url: https://example.com
+
+secrets:
+  default:
+    - default secret with a lot of chars
+  cookie:
+    - cookie secret with a lot of chars
+  cipher:
+    - secret-thirty-two-character-long
+
+ciphers:
+  algorithm: xchacha20-poly1305
+
+hashers:
+  argon2:
+    memory: 128MB
+    iterations: 1
+    parallelism: 1
+    salt_length: 16
+    key_length: 16
+    dedicated_memory: 1GB
+    expected_deviation: 500ms
+    expected_duration: 500ms
+
+version: v1.0.0

test/schema/fixtures/config.schema.test.success/root.no_aliases.yaml

@@ -0,0 +1,17 @@
+serve:
+  public:
+    base_url: "#/definitions/baseUrl"
+
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com
+
+session:
+  cookie:
+    domain: foobar

test/schema/fixtures/config.schema.test.success/root.required.yml

@@ -0,0 +1,9 @@
+selfservice:
+  default_browser_return_url: "#/definitions/defaultReturnTo"
+
+dsn: foo
+
+identity:
+  schemas:
+    - id: default
+      url: https://example.com

test/schema/fixtures/config.schema.test.success/selfServiceAfterDefaultLoginMethod.full.yaml

@@ -0,0 +1,2 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+hooks: "#/definitions/selfServiceAfterDefaultLoginMethodHooks"

test/schema/fixtures/config.schema.test.success/selfServiceAfterDefaultLoginMethod.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceAfterDefaultLoginMethodHooks.full.yaml

@@ -0,0 +1,2 @@
+- "#/definitions/selfServiceSessionRevokerHook"
+- "#/definitions/selfServiceRequireVerifiedAddressHook"

test/schema/fixtures/config.schema.test.success/selfServiceAfterDefaultLoginMethodHooks.required.yaml

@@ -0,0 +1 @@
+[]

test/schema/fixtures/config.schema.test.success/selfServiceAfterLogin.full.yaml

@@ -0,0 +1,4 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+password: "#/definitions/selfServiceAfterDefaultLoginMethod"
+webauthn: "#/definitions/selfServiceAfterDefaultLoginMethod"
+oidc: "#/definitions/selfServiceAfterOIDCLoginMethod"

test/schema/fixtures/config.schema.test.success/selfServiceAfterLogin.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceAfterOIDCLoginMethod.full.yaml

@@ -0,0 +1,3 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+hooks:
+  - "#/definitions/selfServiceSessionRevokerHook"

test/schema/fixtures/config.schema.test.success/selfServiceAfterOIDCLoginMethod.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceAfterRegistration.full.yaml

@@ -0,0 +1,4 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+password: "#/definitions/selfServiceAfterRegistrationMethod"
+webauthn: "#/definitions/selfServiceAfterRegistrationMethod"
+oidc: "#/definitions/selfServiceAfterRegistrationMethod"

test/schema/fixtures/config.schema.test.success/selfServiceAfterRegistration.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceAfterRegistrationMethod.full.yaml

@@ -0,0 +1,3 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+hooks:
+  - "#/definitions/selfServiceSessionIssuerHook"

test/schema/fixtures/config.schema.test.success/selfServiceAfterRegistrationMethod.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceAfterSettings.full.yaml

@@ -0,0 +1,3 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+password: "#/definitions/selfServiceAfterSettingsAuthMethod"
+profile: "#/definitions/selfServiceAfterSettingsProfileMethod"

test/schema/fixtures/config.schema.test.success/selfServiceAfterSettings.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceAfterSettingsAuthMethod.full.yaml

@@ -0,0 +1,4 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+hooks:
+  - "#/definitions/selfServiceWebHook"
+  - "#/definitions/selfServiceSessionRevokerHook"

test/schema/fixtures/config.schema.test.success/selfServiceAfterSettingsProfileMethod.full.yaml

@@ -0,0 +1,3 @@
+default_browser_return_url: "#/definitions/defaultReturnTo"
+hooks:
+  - "#/definitions/selfServiceWebHook"

test/schema/fixtures/config.schema.test.success/selfServiceAfterSettingsProfileMethod.required.yaml

@@ -0,0 +1 @@
+{}

test/schema/fixtures/config.schema.test.success/selfServiceOIDCProvider.fullApple.yaml

@@ -0,0 +1,11 @@
+id: foo
+provider: apple
+client_id: foo
+apple_team_id: foo
+apple_private_key_id: foo
+apple_private_key: foo
+mapper_url: https://example.com
+scope:
+  - foo
+  - bar
+requested_claims: "#/definitions/OIDCClaims"

test/schema/fixtures/config.schema.test.success/selfServiceOIDCProvider.fullGithub.yaml

@@ -0,0 +1,12 @@
+id: foo
+provider: github
+client_id: foo
+client_secret: foo
+issuer_url: https://example.com
+auth_url: https://example.com
+token_url: https://example.com
+mapper_url: https://example.com
+scope:
+  - foo
+  - bar
+requested_claims: "#/definitions/OIDCClaims"

test/schema/fixtures/config.schema.test.success/selfServiceOIDCProvider.fullMicrosoft.yaml

@@ -0,0 +1,13 @@
+id: foo
+provider: microsoft
+client_id: foo
+client_secret: foo
+issuer_url: https://example.com
+auth_url: https://example.com
+token_url: https://example.com
+mapper_url: https://example.com
+scope:
+  - foo
+  - bar
+microsoft_tenant: org
+requested_claims: "#/definitions/OIDCClaims"

test/schema/fixtures/config.schema.test.success/selfServiceOIDCProvider.required.yaml

@@ -0,0 +1,5 @@
+id: foo
+provider: github
+client_id: foo
+client_secret: foo
+mapper_url: https://example.com

test/schema/fixtures/config.schema.test.success/selfServiceSessionIssuerHook.full.yaml

@@ -0,0 +1 @@
+hook: session

test/schema/fixtures/config.schema.test.success/selfServiceSessionRevokerHook.full.yaml

@@ -0,0 +1 @@
+hook: revoke_active_sessions

test/schema/fixtures/config.schema.test.success/selfServiceWebHook.noauth.yaml

@@ -0,0 +1,7 @@
+hook: web_hook
+config:
+  url: https://foo/bar
+  method: POST
+  body: base64://asdf
+  response:
+    ignore: false

test/schema/fixtures/config.schema.test.success/webHookAuthApiKeyProperties.full.yaml

@@ -0,0 +1,5 @@
+type: api_key
+config:
+  name: foo
+  value: bar
+  in: header

test/schema/fixtures/config.schema.test.success/webHookAuthBasicAuthProperties.full.yaml

@@ -0,0 +1,4 @@
+type: basic_auth
+config:
+  user: foo
+  password: bar