fix: change kratos selfservice config and flows setup

Author: ewelinagr

charts/radar-kratos/values.yaml

@@ -244,61 +244,76 @@ kratos:
               issuer: Radar
             enabled: true
           link:
+            config:
+              lifespan: 1h
+            enabled: true
+          code:
+            config:
+              lifespan: 1h
             enabled: true
 
         flows:
           error:
             ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/error'
 
           settings:
-            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/settings'
+            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/account/settings'
             required_aal: highest_available
 
           recovery:
             enabled: true
-            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/recovery'
+            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/auth/recovery'
             use: link
+            after:
+              default_browser_return_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/auth/login'
+#              hooks: # TODO this breaks the ui flow!!!
+#                - hook: web_hook
+#                  config:
+#                    method: POST
+#                    url: http://management-portal:8080/managementportal/api/kratos/subjects/activate
+#                    body: base64://ZnVuY3Rpb24oY3R4KSB7CiAgICBpZGVudGl0eTogaWYgc3RkLm9iamVjdEhhcyhjdHgsICJpZGVudGl0eSIpIHRoZW4gY3R4LmlkZW50aXR5IGVsc2UgbnVsbCwKICAgIHBheWxvYWQ6IGlmIHN0ZC5vYmplY3RIYXMoY3R4LCAiZmxvdyIpICYmIHN0ZC5vYmplY3RIYXMoY3R4LmZsb3csICJ0cmFuc2llbnRfcGF5bG9hZCIpIHRoZW4gY3R4LmZsb3cudHJhbnNpZW50X3BheWxvYWQgZWxzZSBudWxsLAogICAgY29va2llczogY3R4LnJlcXVlc3RfY29va2llcwp9Cg==
+#                    response:
+#                      ignore: false
 
           verification:
             # our current flow necessitates that users reset their password after they activate an account in managementportal,
             # this works as verification
-            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/verification'
-            enabled: false
+            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/auth/verification'
+            enabled: true
             use: code
-            after:
-              default_browser_return_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui'
-              hooks:
-                - hook: web_hook
-                  config:
-                    method: POST
-                    url: http://management-portal:8080/managementportal/api/kratos/subjects/activate
-                    body: base64://ZnVuY3Rpb24oY3R4KSB7CiAgICBpZGVudGl0eTogaWYgc3RkLm9iamVjdEhhcyhjdHgsICJpZGVudGl0eSIpIHRoZW4gY3R4LmlkZW50aXR5IGVsc2UgbnVsbCwKICAgIHBheWxvYWQ6IGlmIHN0ZC5vYmplY3RIYXMoY3R4LCAiZmxvdyIpICYmIHN0ZC5vYmplY3RIYXMoY3R4LmZsb3csICJ0cmFuc2llbnRfcGF5bG9hZCIpIHRoZW4gY3R4LmZsb3cudHJhbnNpZW50X3BheWxvYWQgZWxzZSBudWxsLAogICAgY29va2llczogY3R4LnJlcXVlc3RfY29va2llcwp9Cg==
-                    response:
-                      ignore: true
+#            after: # TODO this breaks the ui flow!!!
+#              hooks:
+#                - hook: web_hook
+#                  config:
+#                    method: POST
+#                    url: http://management-portal:8080/managementportal/api/kratos/subjects/activate
+#                    body: base64://ZnVuY3Rpb24oY3R4KSB7CiAgICBpZGVudGl0eTogaWYgc3RkLm9iamVjdEhhcyhjdHgsICJpZGVudGl0eSIpIHRoZW4gY3R4LmlkZW50aXR5IGVsc2UgbnVsbCwKICAgIHBheWxvYWQ6IGlmIHN0ZC5vYmplY3RIYXMoY3R4LCAiZmxvdyIpICYmIHN0ZC5vYmplY3RIYXMoY3R4LmZsb3csICJ0cmFuc2llbnRfcGF5bG9hZCIpIHRoZW4gY3R4LmZsb3cudHJhbnNpZW50X3BheWxvYWQgZWxzZSBudWxsLAogICAgY29va2llczogY3R4LnJlcXVlc3RfY29va2llcwp9Cg==
+#                    response:
+#                      ignore: true
 
           logout:
             after:
-              default_browser_return_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/login'
+              default_browser_return_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/auth/login'
 
           login:
-            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/login'
+            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/auth/login'
 
           registration:
-            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/registration'
-            after:
-              password:
-                hooks:
-                  - hook: web_hook
-                    config:
-                      method: POST
-                      url: http://management-portal:8080/managementportal/api/kratos/subjects
-                      body: base64://ZnVuY3Rpb24oY3R4KSB7CiAgICBpZGVudGl0eTogaWYgc3RkLm9iamVjdEhhcyhjdHgsICJpZGVudGl0eSIpIHRoZW4gY3R4LmlkZW50aXR5IGVsc2UgbnVsbCwKICAgIHBheWxvYWQ6IGlmIHN0ZC5vYmplY3RIYXMoY3R4LCAiZmxvdyIpICYmIHN0ZC5vYmplY3RIYXMoY3R4LmZsb3csICJ0cmFuc2llbnRfcGF5bG9hZCIpIHRoZW4gY3R4LmZsb3cudHJhbnNpZW50X3BheWxvYWQgZWxzZSBudWxsLAogICAgY29va2llczogY3R4LnJlcXVlc3RfY29va2llcwp9Cg==
-                      response:
-                        ignore: true
-                  - hook: session
-              oidc:
-                hooks:
-                  - hook: session
+            ui_url: '{{ .Values.advertised_protocol }}://{{ .Values.server_name }}/kratos-ui/auth/registration'
+#            after: # TODO this breaks the ui flow!!!
+#              password:
+#                hooks:
+#                  - hook: web_hook
+#                    config:
+#                      method: POST
+#                      url: http://management-portal:8080/managementportal/api/kratos/subjects
+#                      body: base64://ZnVuY3Rpb24oY3R4KSB7CiAgICBpZGVudGl0eTogaWYgc3RkLm9iamVjdEhhcyhjdHgsICJpZGVudGl0eSIpIHRoZW4gY3R4LmlkZW50aXR5IGVsc2UgbnVsbCwKICAgIHBheWxvYWQ6IGlmIHN0ZC5vYmplY3RIYXMoY3R4LCAiZmxvdyIpICYmIHN0ZC5vYmplY3RIYXMoY3R4LmZsb3csICJ0cmFuc2llbnRfcGF5bG9hZCIpIHRoZW4gY3R4LmZsb3cudHJhbnNpZW50X3BheWxvYWQgZWxzZSBudWxsLAogICAgY29va2llczogY3R4LnJlcXVlc3RfY29va2llcwp9Cg==
+#                      response:
+#                        ignore: true
+#                  - hook: session
+#              oidc:
+#                hooks:
+#                  - hook: session
 
       identity:
         default_schema_id: subject