fix: OIDC registration to login flow fails to invoke webhooks

selfservice/strategy/oidc/strategy_login.go

@@ -536,6 +536,7 @@ func (s *Strategy) Login(w http.ResponseWriter, r *http.Request, f *login.Flow,
 		if err != nil {
 			return nil, s.HandleError(ctx, w, r, f, pid, nil, err)
 		}
+		f.Active = s.ID()
 		_, err = s.ProcessLogin(ctx, w, r, f, nil, claims, provider, &AuthCodeContainer{
 			FlowID: f.ID.String(),
 			Traits: p.Traits,

selfservice/strategy/oidc/strategy_registration.go

@@ -216,6 +216,7 @@ func (s *Strategy) Register(w http.ResponseWriter, r *http.Request, f *registrat
 		if err != nil {
 			return s.HandleError(ctx, w, r, f, pid, nil, err)
 		}
+		f.Active = s.ID()
 		_, err = s.processRegistration(ctx, w, r, f, nil, claims, provider, &AuthCodeContainer{
 			FlowID:           f.ID.String(),
 			Traits:           p.Traits,

selfservice/strategy/oidc/strategy_test.go

@@ -1384,6 +1384,52 @@
 			})
 
 		}
+
+		t.Run("case=runs method-specific post-registration and post-login hooks", func(t *testing.T) {
+			postRegistrationWebhook := hooktest.NewServer()
+			t.Cleanup(postRegistrationWebhook.Close)
+			postRegistrationWebhook.SetConfig(t, conf.GetProvider(t.Context()),
+				config.HookStrategyKey(config.ViperKeySelfServiceRegistrationAfter, identity.CredentialsTypeOIDC.String()))
+			postLoginWebhook := hooktest.NewServer()
+			t.Cleanup(postLoginWebhook.Close)
+			postLoginWebhook.SetConfig(t, conf.GetProvider(t.Context()),
+				config.HookStrategyKey(config.ViperKeySelfServiceLoginAfter, identity.CredentialsTypeOIDC.String()))
+
+			nonce := randx.MustString(16, randx.Alpha)
+			token := strings.NewReplacer("{{sub}}", testhelpers.RandomEmail(), "{{nonce}}", nonce).Replace(`{
+				"iss": "https://appleid.apple.com",
+				"sub": "{{sub}}",
+				"nonce": "{{nonce}}"
+			}`)
+
+			submit := func(t *testing.T, action, transientPayload string) {
+				res, err := cl.PostForm(action, url.Values{
+					"id_token":          {token},
+					"id_token_nonce":    {nonce},
+					"provider":          {"test-provider"},
+					"transient_payload": {transientPayload},
+				})
+				require.NoError(t, err)
+				defer res.Body.Close()
+				body := ioutilx.MustReadAll(res.Body)
+				require.NotEmpty(t, gjson.GetBytes(body, "session_token").String(), "%s", body)
+			}
+
+			registrationPayload := `{"data": "id-token-registration"}`
+			rf := newAPIRegistrationFlow(t, returnTS.URL, time.Minute)
+			submit(t, assertFormValues(t, rf.ID, "test-provider"), registrationPayload)
+			postRegistrationWebhook.AssertTransientPayload(t, registrationPayload)
+
+			loginPayload := `{"data": "id-token-login"}`
+			lf := newAPILoginFlow(t, returnTS.URL, time.Minute)
+			submit(t, assertFormValues(t, lf.ID, "test-provider"), loginPayload)
+			postLoginWebhook.AssertTransientPayload(t, loginPayload)
+
+			registrationToLoginPayload := `{"data": "id-token-registration-to-login"}`
+			rf = newAPIRegistrationFlow(t, returnTS.URL, time.Minute)
+			submit(t, assertFormValues(t, rf.ID, "test-provider"), registrationToLoginPayload)
+			postLoginWebhook.AssertTransientPayload(t, registrationToLoginPayload)
+		})
 	})
 
 	t.Run("case=login without registered account with return_to", func(t *testing.T) {