Submitting registration flow returns 400 error

[dmitry-exposure]

Wondering whether this is expected behavior because it feel really strange:

• My identity is very simple, it has just one trait: email
• I have created a new registration flow and it has three fields:
  • email
  • csrf_token
  • method:profile
• When submitting the flow kratos responds with HTTP 400 Bad Request and state of choose_method with UI contains an error message that says: "'Please choose a credential to authenticate yourself with.'"

My question is: why is this an error and request is bad? Per documentation HTTP 400 indicates that the submission was invalid.

What would be the valid way to submit a login flow without getting an error?
Why create does create login flow return a form that can't be submitted successfully.

Documentation is a little bit vague on this so any help is appreciated.

[vinckr]

Hey @dmitry-exposure
The behavior you're seeing is expected if no credential method (such as password, oidc, or code) is enabled or selected in your Ory Kratos configuration. The error message "Please choose a credential to authenticate yourself with." appears when the submitted flow does not specify a valid authentication method. This is not a "bad request" in the sense of a malformed HTTP request, but rather a form validation error: Kratos cannot proceed because it doesn't know how you want to authenticate the user

The form returned by the create flow endpoint reflects the enabled credential methods. If none are enabled, or if your identity schema does not mark any trait as an identifier for a credential method, the form will not be submittable and you will see this error.

I assume you want to use the code authentication method?

[dmitry-exposure]

Hey, @vinckr, thanks for your response! I have the password, lookup_secret and code methods enabled. My identity schema has email trait set as identifier.

[vinckr]

Hm that is weird it all sounds correct.
Hard to say what is going on without looking at the deployment / config etc. directly...

Can you share steps to reproduce this on a fresh install?

[dmitrybelyakov]

@vinckr thank you, i actually found a workaround for this, so all good. I will close this.

[dmitrybelyakov]

... actually it's not an issue so I can't close it. But the solution we had is: we have kratos behind a proxy so we are just rewriting the response code for this particular instance.