feat: enhance invitation code handling in authorization flow

- Updated WithInvitationCode function to set the prompt parameter to "create" when an invitation code is provided.
- Added assertions in tests to verify that the prompt is correctly set in authURLOptions and included in the generated authentication URL.
- Improved test coverage for scenarios involving invitation codes, ensuring proper handling of the prompt parameter.

Author: BrandtKruger

oauth2/authorization_code/authorization_code_test.go

@@ -143,9 +143,16 @@ func TestWithInvitationCodeOption(t *testing.T) {
 		assert.Contains(isInvitationValues, "true", "is_invitation should be set to 'true'")
 	}
 
+	promptValues, hasPrompt := flow.authURLOptions["prompt"]
+	assert.True(hasPrompt, "prompt should be set in authURLOptions when invitation code is provided")
+	if hasPrompt {
+		assert.Contains(promptValues, "create", "prompt should be 'create' when invitation code is provided")
+	}
+
 	authURL := kindeAuthFlow.GetAuthURL()
 	assert.Contains(authURL, "invitation_code=inv_987654321", "AuthURL should contain invitation_code parameter")
 	assert.Contains(authURL, "is_invitation=true", "AuthURL should contain is_invitation parameter")
+	assert.Contains(authURL, "prompt=create", "AuthURL should contain prompt=create parameter")
 }
 
 func TestWithInvitationCodeOptionEmpty(t *testing.T) {
@@ -165,8 +172,10 @@ func TestWithInvitationCodeOptionEmpty(t *testing.T) {
 	flow := kindeAuthFlow.(*AuthorizationCodeFlow)
 	_, hasInvitationCode := flow.authURLOptions["invitation_code"]
 	_, hasIsInvitation := flow.authURLOptions["is_invitation"]
+	_, hasPrompt := flow.authURLOptions["prompt"]
 	assert.False(hasInvitationCode, "invitation_code should not be set when empty")
 	assert.False(hasIsInvitation, "is_invitation should not be set when empty")
+	assert.False(hasPrompt, "prompt should not be set when invitation code is empty")
 }
 
 func TestWithInvitationCodeOptionOverwrite(t *testing.T) {
@@ -203,6 +212,14 @@ func TestWithInvitationCodeOptionOverwrite(t *testing.T) {
 		assert.Len(isInvitationValues, 1, "is_invitation should have only one value")
 		assert.Contains(isInvitationValues, "true", "is_invitation should be 'true'")
 	}
+
+	promptValues, hasPrompt := flow.authURLOptions["prompt"]
+	assert.True(hasPrompt, "prompt should be set in authURLOptions when invitation code is provided")
+	if hasPrompt {
+		// Should only have one value
+		assert.Len(promptValues, 1, "prompt should have only one value")
+		assert.Contains(promptValues, "create", "prompt should be 'create' when invitation code is provided")
+	}
 }
 
 func getTestAuthorizationServer() *httptest.Server {

oauth2/authorization_code/options.go

@@ -144,13 +144,14 @@ func WithPKCEChallengeMethod(method string) Option {
 }
 
 // WithInvitationCode sets the invitation code and is_invitation parameters for team member invitations.
-// When an invitation code is provided, is_invitation will be set to "true".
+// When an invitation code is provided, is_invitation will be set to "true" and prompt will be set to "create".
 // If called multiple times, it will overwrite the previous values instead of accumulating them.
 func WithInvitationCode(invitationCode string) Option {
 	return func(s *AuthorizationCodeFlow) {
 		if invitationCode != "" {
 			s.authURLOptions.Set("invitation_code", invitationCode)
 			s.authURLOptions.Set("is_invitation", "true")
+			s.authURLOptions.Set("prompt", "create")
 		}
 	}
 }