Merge tag 'v0.7.0-alpha.1' into fandom_master_v0.7.0

About two months ago we released Ory Kratos v0.6. Today, we are excited to announce the next iteration of Ory Kratos v0.7! This release includes 215 commits from 24 contributors with over 770 files and more than 100.000 lines of code changed!

Ory Kratos v0.7 brings massive developer experience improvements:

- A reworked, tested, and standardized SDK based on OpenAPI 3.0.3 ([ory#1477](ory#1477), [ory#1424](ory#1424));
- Native support of Single-Page-Apps (ReactJS, AngularJS, ...) for all self-service flows ([ory#1367](ory#1367));
- Sign in with Yandex, VK, Auth0, Slack;
- An all-new, secure logout flow ([ory#1433](ory#1433));
- Important security updates to the self-service GET APIs ([ory#1458](ory#1458), [ory#1282](ory#1282));
- Built-in support for TLS ([ory#1466](ory#1466));
- Improved documentation and Go Module structure;
- Resolving a case-sensitivity bug in self-service recovery and verification flows;
- Improved performance for listing identities;
- Support for Instant tracing ([ory#1429](ory#1429));
- Improved control for SMTPS, supporting SSL and STARTTLS ([ory#1430](ory#1430));
- Ability to run Ory Kratos in networks without outbound requests ([ory#1445](ory#1445));
- Improved control over HTTP Cookie behavior ([ory#1531](ory#1531));
- Several smaller user experience improvements and bug fixes;
- Improved e2e test pipeline.

In the next iteration of Ory Kratos, we will focus on providing a NextJS example application for the SPA integration as well as the long-awaited MFA flows!

Please be aware that upgrading to Ory Kratos 0.7 requires you to apply SQL migrations. Make sure to back up your database before migration!

For more details on breaking changes and patch notes, see below.

Author: t-tomalak

.circleci/config.yml

@@ -48,6 +48,12 @@ jobs:
       - checkout
       - setup_remote_docker
 
+      - go/load-cache:
+          key: ory-kratos-go-mod-v1
+      - go/mod-download
+      - go/save-cache:
+          key: ory-kratos-go-mod-v1
+
       - prettier/install
       - prettier/check
       - prettier/install:
@@ -59,15 +65,13 @@ jobs:
 
       - golangci/install
       - golangci/lint
-      - go/load-cache
-      - go/mod-download
-      - go/save-cache
       - node/install-packages
       - run: timeout 15 sh -c 'until nc -z $0 $1; do sleep 1; done' 127.0.0.1 4444
       - run: make install
       - run: make test-docs
       - run: make test-coverage
-      - run: test -z "$CIRCLE_PR_NUMBER" && goveralls -service=circle-ci -coverprofile=coverage.txt -repotoken=$COVERALLS_REPO_TOKEN || echo "forks are not allowed to push to coveralls"
+      - run: |
+          bash <(curl -s https://codecov.io/bash)
 
   test-e2e:
     docker:
@@ -172,14 +176,14 @@ workflows:
               ignore: /master/
       - docs/cli
       - docs/build:
-          swag-spec-location: spec/openapi.json
+          swag-spec-location: spec/api.json
           filters:
             tags:
               only: /.*/
             branches:
               only: master
       - sdk/release-openapi:
-          swagpath: spec/openapi.json
+          swagpath: spec/api.json
           requires:
             - test
             - test-e2e
@@ -209,6 +213,7 @@ workflows:
             tags:
               only: /.*/
       - goreleaser/render-version-schema:
+          schema-path: driver/config/.schema/config.schema.json
           requires:
             - goreleaser/release
           filters:

.docker/Dockerfile-build

@@ -7,7 +7,6 @@ WORKDIR /go/src/github.com/ory/kratos
 ADD go.mod go.mod
 ADD go.sum go.sum
 ADD internal/httpclient/go.* internal/httpclient/
-ADD corp/go.* corp/
 
 ENV GO111MODULE on
 ENV CGO_ENABLED 1

.github/pull_request_template.md

@@ -1,4 +1,16 @@
-## Related issue
+<!--
+Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request.
+
+This text will be included in the changelog. If applicable, include links to documentation or pieces of code.
+If your change includes breaking changes please add a codeblock documenting the breaking change:
+
+```
+BREAKING CHANGES: This patch changes the behavior of configuration item `foo` to do bar. To keep the existing
+behavior please do baz.
+```
+-->
+
+## Related issue(s)
 
 <!--
 Please link the GitHub issue this pull request resolves in the format of `#1234`. If you discussed this change
@@ -11,20 +23,19 @@ You can discuss changes with maintainers either in the Github Discusssions in th
 join the [Ory Chat](https://www.ory.sh/chat).
 -->
 
-## Proposed changes
+## Checklist
 
 <!--
-Describe the big picture of your changes here to communicate to the maintainers why we should accept this pull request.
--->
+Put an `x` in the boxes that apply. You can also fill these out after creating the PR.
 
-## Checklist
+Please be aware that pull requests must have all boxes ticked in order to be merged.
 
-<!--
-Put an `x` in the boxes that apply. You can also fill these out after creating the PR. If you're unsure about any of
-them, don't hesitate to ask. We're here to help! This is simply a reminder of what we are going to look for before merging your code.
+If you're unsure about any of them, don't hesitate to ask. We're here to help!
 -->
 
 - [ ] I have read the [contributing guidelines](../blob/master/CONTRIBUTING.md).
+- [ ] I am following the
+      [contributing code guidelines](../blob/master/CONTRIBUTING.md#contributing-code).
 - [ ] I have read the [security policy](../security/policy).
 - [ ] I confirm that this pull request does not address a security
       vulnerability. If this pull request addresses a security. vulnerability, I
@@ -35,7 +46,7 @@ them, don't hesitate to ask. We're here to help! This is simply a reminder of wh
       works.
 - [ ] I have added or changed [the documentation](docs/docs).
 
-## Further comments
+## Further Comments
 
 <!--
 If this is a relatively large or complex change, kick off the discussion by explaining why you chose the solution

.gitignore

@@ -3,7 +3,6 @@ cover.out
 tmp/
 .DS_Store
 ./kratos
-coverage.txt
 packrd/
 *-packr.go
 dist/
@@ -13,3 +12,4 @@ test/e2e/cypress/videos
 test/e2e/cypress/screenshots
 test/e2e/.bin
 pkged.go
+coverage.*

.schema/openapi/gen.go.yml

@@ -1,5 +1,6 @@
 disallowAdditionalPropertiesIfNotPresent: true
-packageName: kratos
-generateInterfaces: false
+packageName: client
+generateInterfaces: true
 isGoSubmodule: false
 structPrefix: true
+enumClassPrefix: true

.schema/openapi/patches/meta.yaml

@@ -14,22 +14,3 @@
       name: Apache 2.0
     contact:
       email: "[email protected]"
-
-- op: replace
-  path: /components/securitySchemes/sessionCookie
-  value:
-    type: apiKey
-    in: cookie
-    name: ory_kratos_session
-
-- op: replace
-  path: /tags
-  value:
-    - name: admin
-      description: All administrative API endpoints exposed at the admin API port.
-      externalDocs:
-        url: https://www.ory.sh/kratos/docs/reference/api
-    - name: public
-      description: All public API endpoints exposed at the public API port.
-      externalDocs:
-        url: https://www.ory.sh/kratos/docs/reference/api

.schema/openapi/patches/schema.yaml

@@ -15,22 +15,9 @@
 - op: add
   path: /components/schemas/uiNodeInputAttributes/properties/value/nullable
   value: true
-- op: replace
-  path: /components/schemas/uiNodeInputAttributesValue
-  value:
-    oneOf:
-      - type: string
-      - type: number
-      - type: boolean
-- op: add
-  path: /components/schemas/uiNodeInputAttributes/properties/value/$ref
-  value: "#/components/schemas/uiNodeInputAttributesValue"
 
 - op: replace
-  path: /components/schemas/selfServiceErrorContainer/properties/errors/type
-  value: array
-- op: replace
-  path: /components/schemas/selfServiceErrorContainer/properties/errors/items
+  path: /components/schemas/selfServiceError/properties/error
   value:
     type: object
 

.schema/openapi/patches/security.yaml

@@ -1,11 +1,10 @@
 - op: replace
-  path: /components/securitySchemes/oryToken
-  value:
-    type: http
-    scheme: bearer
-
-- op: replace
-  path: /components/securitySchemes/sessionToken
+  path: /components/securitySchemes/oryAccessToken
   value:
     type: http
     scheme: bearer
+    description: |
+      This security mechanism is only applicable when using the [Ory Platform](https://console.ory.sh) by
+      creating an [Ory Personal Access Token](https://www.ory.sh/docs/guides/create-personal-access-token).
+      If you are using the open source version, this security mechanism
+      will not work out of the box as you will need to add a security mechanism yourself.

.schema/openapi/patches/selfservice.yaml

@@ -1,24 +1,134 @@
 # Makes submitSelfServiceLoginFlowPayload polymorph
+#- op: remove
+#  path: /components/schemas/submitSelfServiceLoginFlowBody/type
+#- op: add
+#  path: /components/schemas/submitSelfServiceLoginFlowBody/oneOf
+#  value:
+#    - "$ref": "#/components/schemas/submitSelfServiceLoginFlowWithPasswordMethod"
+
+# Makes submitSelfServiceRegistrationFlowPayload polymorph
+
+# All modifications for the registration flow
 - op: remove
-  path: /components/schemas/submitSelfServiceLoginFlow/type
+  path: /components/schemas/submitSelfServiceRegistrationFlowBody/type
+- op: add
+  path: /components/schemas/submitSelfServiceRegistrationFlowWithPasswordMethodBody/properties/method/enum
+  value:
+    - password
+    - oidc
 - op: add
-  path: /components/schemas/submitSelfServiceLoginFlow/oneOf
+  path: /components/schemas/submitSelfServiceRegistrationFlowBody/oneOf
   value:
-    - "$ref": "#/components/schemas/submitSelfServiceLoginFlowWithPasswordMethod"
+    - "$ref": "#/components/schemas/submitSelfServiceRegistrationFlowWithPasswordMethodBody"
+- op: add
+  path: /components/schemas/submitSelfServiceRegistrationFlowBody/discriminator
+  value:
+    propertyName: method
+    mapping:
+      password: "#/components/schemas/submitSelfServiceRegistrationFlowWithPasswordMethodBody"
+      oidc: "#/components/schemas/submitSelfServiceRegistrationFlowWithOidcMethodBody"
+# end
 
-# Makes submitSelfServiceRegistrationFlowPayload polymorph
+# All modifications for the login flow
+- op: remove
+  path: /components/schemas/submitSelfServiceLoginFlowBody/type
+- op: add
+  path: /components/schemas/submitSelfServiceLoginFlowWithPasswordMethodBody/properties/method/enum
+  value:
+    - password
+    - oidc
+- op: add
+  path: /components/schemas/submitSelfServiceLoginFlowBody/oneOf
+  value:
+    - "$ref": "#/components/schemas/submitSelfServiceLoginFlowWithPasswordMethodBody"
+- op: add
+  path: /components/schemas/submitSelfServiceLoginFlowBody/discriminator
+  value:
+    propertyName: method
+    mapping:
+      password: "#/components/schemas/submitSelfServiceLoginFlowWithPasswordMethodBody"
+      oidc: "#/components/schemas/submitSelfServiceLoginFlowWithOidcMethodBody"
+# end
+
+# All modifications for the recovery flow
+- op: remove
+  path: /components/schemas/submitSelfServiceRecoveryFlowBody/type
+- op: add
+  path: /components/schemas/submitSelfServiceRecoveryFlowWithLinkMethodBody/properties/method/enum
+  value:
+    - password
+    - oidc
+- op: add
+  path: /components/schemas/submitSelfServiceRecoveryFlowBody/oneOf
+  value:
+    - "$ref": "#/components/schemas/submitSelfServiceRecoveryFlowWithLinkMethodBody"
+- op: add
+  path: /components/schemas/submitSelfServiceRecoveryFlowBody/discriminator
+  value:
+    propertyName: method
+    mapping:
+      link: "#/components/schemas/submitSelfServiceRecoveryFlowWithLinkMethodBody"
+- op: add
+  path: /components/schemas/selfServiceRecoveryFlowState/enum
+  value:
+    - choose_method
+    - sent_email
+    - passed_challenge
+# End
+
+# All modifications for the verification flow
 - op: remove
-  path: /components/schemas/submitSelfServiceRegistrationFlow/type
+  path: /components/schemas/submitSelfServiceVerificationFlowBody/type
+- op: add
+  path: /components/schemas/submitSelfServiceVerificationFlowWithLinkMethodBody/properties/method/enum
+  value:
+    - password
+    - oidc
+- op: add
+  path: /components/schemas/submitSelfServiceVerificationFlowBody/oneOf
+  value:
+    - "$ref": "#/components/schemas/submitSelfServiceVerificationFlowWithLinkMethodBody"
 - op: add
-  path: /components/schemas/submitSelfServiceRegistrationFlow/oneOf
+  path: /components/schemas/submitSelfServiceVerificationFlowBody/discriminator
   value:
-    - "$ref": "#/components/schemas/submitSelfServiceRegistrationFlowWithPasswordMethod"
+    propertyName: method
+    mapping:
+      link: "#/components/schemas/submitSelfServiceVerificationFlowWithLinkMethodBody"
+- op: add
+  path: /components/schemas/selfServiceVerificationFlowState/enum
+  value:
+    - choose_method
+    - sent_email
+    - passed_challenge
+# End
+
 
-# Makes submitSelfServiceSettingsFlow polymorph
+
+# All modifications for the settings flow
 - op: remove
-  path: /components/schemas/submitSelfServiceSettingsFlow/type
+  path: /components/schemas/submitSelfServiceSettingsFlowBody/type
+- op: add
+  path: /components/schemas/submitSelfServiceSettingsFlowWithPasswordMethodBody/properties/method/enum
+  value:
+    - password
+    - profile
+    - oidc
+- op: add
+  path: /components/schemas/submitSelfServiceSettingsFlowBody/oneOf
+  value:
+    - "$ref": "#/components/schemas/submitSelfServiceSettingsFlowWithPasswordMethodBody"
+    - "$ref": "#/components/schemas/submitSelfServiceSettingsFlowWithProfileMethodBody"
+- op: add
+  path: /components/schemas/submitSelfServiceSettingsFlowBody/discriminator
+  value:
+    propertyName: method
+    mapping:
+      password: "#/components/schemas/submitSelfServiceSettingsFlowWithPasswordMethodBody"
+      profile: "#/components/schemas/submitSelfServiceSettingsFlowWithProfileMethodBody"
+      oidc: "#/components/schemas/submitSelfServiceSettingsFlowWithOidcMethodBody"
 - op: add
-  path: /components/schemas/submitSelfServiceSettingsFlow/oneOf
+  path: /components/schemas/selfServiceSettingsFlowState/enum
   value:
-    - "$ref": "#/components/schemas/submitSelfServiceSettingsFlowWithPasswordMethod"
-    - "$ref": "#/components/schemas/submitSelfServiceSettingsFlowWithProfileMethod"
+    - show_form
+    - success
+# end

.schema/openapi/patches/session.yaml

@@ -0,0 +1,6 @@
+- op: add
+  path: /paths/~1sessions~1whoami/get/parameters/0/example
+  value: MP2YWEMeM8MxjkGKpH4dqOQ4Q4DlSPaj
+- op: add
+  path: /paths/~1sessions~1whoami/get/parameters/1/example
+  value: ory_kratos_session=a19iOVAbdzdgl70Rq1QZmrKmcjDtdsviCTZx7m9a9yHIUS8Wa9T7hvqyGTsLHi6Qifn2WUfpAKx9DWp0SJGleIn9vh2YF4A16id93kXFTgIgmwIOvbVAScyrx7yVl6bPZnCx27ec4WQDtaTewC1CpgudeDV2jQQnSaCP6ny3xa8qLH-QUgYqdQuoA_LF1phxgRCUfIrCLQOkolX5nv3ze_f==