Fix/organization connections empty properties

examples/test_organization_connections/main.go

@@ -0,0 +1,273 @@
+package main
+
+import (
+	"context"
+	"fmt"
+	"log"
+	"os"
+	"strings"
+
+	"github.com/kinde-oss/kinde-go/kinde"
+	"github.com/kinde-oss/kinde-go/kinde/management_api"
+	"github.com/kinde-oss/kinde-go/oauth2/client_credentials"
+)
+
+// Example: Testing GetOrganizationConnections with local SDK
+//
+// This example demonstrates how to test the GetOrganizationConnections fix
+// using a local SDK. It verifies that connection properties are properly populated.
+//
+// Setup:
+// 1. Use Go's replace directive in go.mod:
+//    replace github.com/kinde-oss/kinde-go => /path/to/local/kinde-go
+//
+// 2. Set environment variables:
+//    export KINDE_ISSUER_URL="https://your-subdomain.kinde.com"
+//    export KINDE_CLIENT_ID="your_client_id"
+//    export KINDE_CLIENT_SECRET="your_client_secret"
+//    export KINDE_ORGANIZATION_CODE="your_org_code"
+//
+// 3. Run: go run main.go
+
+func main() {
+	// Validate environment variables
+	issuerURL := os.Getenv("KINDE_ISSUER_URL")
+	clientID := os.Getenv("KINDE_CLIENT_ID")
+	clientSecret := os.Getenv("KINDE_CLIENT_SECRET")
+	organizationCode := os.Getenv("KINDE_ORGANIZATION_CODE")
+	customAudience := os.Getenv("KINDE_AUDIENCE") // Optional: custom audience
+
+	if issuerURL == "" || clientID == "" || clientSecret == "" || organizationCode == "" {
+		log.Fatal(`
+Missing required environment variables:
+  KINDE_ISSUER_URL      - Your Kinde issuer URL
+  KINDE_CLIENT_ID       - Your M2M client ID
+  KINDE_CLIENT_SECRET   - Your M2M client secret
+  KINDE_ORGANIZATION_CODE - Organization code to test
+
+Example:
+  export KINDE_ISSUER_URL="https://your-subdomain.kinde.com"
+  export KINDE_CLIENT_ID="your_client_id"
+  export KINDE_CLIENT_SECRET="your_client_secret"
+  export KINDE_ORGANIZATION_CODE="org_abc123"
+`)
+	}
+
+	ctx := context.Background()
+
+	// Initialize client credentials flow
+	var opts []client_credentials.Option
+
+	if customAudience != "" {
+		// Use custom audience if provided
+		fmt.Printf("Using custom audience: %s\n", customAudience)
+		opts = append(opts, client_credentials.WithAudience(customAudience))
+	} else {
+		// Use default Management API audience
+		opts = append(opts, client_credentials.WithKindeManagementAPI(issuerURL))
+	}
+
+	opts = append(opts, client_credentials.WithTokenValidation(true))
+
+	clientCredentialsFlow, err := client_credentials.NewClientCredentialsFlow(
+		issuerURL,
+		clientID,
+		clientSecret,
+		opts...,
+	)
+	if err != nil {
+		log.Fatalf("Failed to create client credentials flow: %v", err)
+	}
+
+	// Create management API client
+	kindeManagementAPI, err := kinde.NewManagementAPI(ctx, issuerURL, clientCredentialsFlow)
+	if err != nil {
+		log.Fatalf("Failed to create management API client: %v", err)
+	}
+
+	// Test GetOrganizationConnections
+	fmt.Printf("Testing GetOrganizationConnections for organization: %s\n\n", organizationCode)
+
+	resp, err := kindeManagementAPI.GetOrganizationConnections(ctx, management_api.GetOrganizationConnectionsParams{
+		OrganizationCode: organizationCode,
+	})
+	if err != nil {
+		// Check for OAuth audience error and provide helpful guidance
+		errStr := err.Error()
+		if strings.Contains(errStr, "audience") && strings.Contains(errStr, "whitelisted") {
+			log.Fatalf(`
+❌ OAuth Configuration Error: Audience not whitelisted
+
+The error indicates that the Management API audience hasn't been whitelisted for your M2M application.
+
+To fix this:
+1. Go to your Kinde Dashboard: https://app.kinde.com
+2. Navigate to: Settings > Applications > [Your M2M Application]
+3. In the "Allowed audiences" section, add: %s/api
+4. Save the changes
+5. Try running the test again
+
+Alternatively, if you have a different audience configured, you can:
+- Set KINDE_AUDIENCE environment variable to use a custom audience
+- Or modify the code to use client_credentials.WithAudience() instead of WithKindeManagementAPI()
+
+See FIX_AUDIENCE_ERROR.md for detailed instructions.
+
+Original error: %v
+`, issuerURL, err)
+		}
+		log.Fatalf("Failed to get organization connections: %v", err)
+	}
+
+	// Handle error responses
+	switch response := resp.(type) {
+	case *management_api.GetOrganizationConnectionsBadRequest:
+		fmt.Println("\n❌ API returned Bad Request (400)")
+		// Cast to ErrorResponse to access GetErrors
+		errResp := (*management_api.ErrorResponse)(response)
+		errors := errResp.GetErrors()
+		if len(errors) > 0 {
+			for i, err := range errors {
+				if code, ok := err.Code.Get(); ok {
+					fmt.Printf("Error %d Code: %s\n", i+1, code)
+				}
+				if message, ok := err.Message.Get(); ok {
+					fmt.Printf("Error %d Message: %s\n", i+1, message)
+				}
+			}
+		}
+		fmt.Println("\nPossible causes:")
+		fmt.Println("  - Invalid organization code (check that it's correct)")
+		fmt.Println("  - Organization doesn't exist")
+		fmt.Println("  - Missing required permissions")
+		fmt.Println("\nTo find valid organization codes:")
+		fmt.Println("  1. Go to Kinde Dashboard: https://app.kinde.com")
+		fmt.Println("  2. Navigate to: Organizations")
+		fmt.Println("  3. Use the organization 'code' (not the name or ID)")
+		log.Fatalf("Cannot proceed with invalid organization code: %s", organizationCode)
+
+	case *management_api.GetOrganizationConnectionsForbidden:
+		fmt.Println("\n❌ API returned Forbidden (403)")
+		// Cast to ErrorResponse to access GetErrors
+		errResp := (*management_api.ErrorResponse)(response)
+		errors := errResp.GetErrors()
+		if len(errors) > 0 {
+			for i, err := range errors {
+				if code, ok := err.Code.Get(); ok {
+					fmt.Printf("Error %d Code: %s\n", i+1, code)
+				}
+				if message, ok := err.Message.Get(); ok {
+					fmt.Printf("Error %d Message: %s\n", i+1, message)
+				}
+			}
+		}
+		fmt.Println("\nPossible causes:")
+		fmt.Println("  - M2M application missing 'read:organization_connections' scope")
+		fmt.Println("  - Insufficient permissions")
+		fmt.Println("\nTo fix:")
+		fmt.Println("  1. Go to Kinde Dashboard: https://app.kinde.com")
+		fmt.Println("  2. Navigate to: Settings > Applications > [Your M2M Application]")
+		fmt.Println("  3. Ensure 'read:organization_connections' scope is enabled")
+		log.Fatalf("Access forbidden - check permissions")
+
+	case *management_api.GetOrganizationConnectionsTooManyRequests:
+		fmt.Println("\n⚠️  API returned Too Many Requests (429)")
+		// Cast to ErrorResponse to access GetErrors
+		errResp := (*management_api.ErrorResponse)(response)
+		errors := errResp.GetErrors()
+		if len(errors) > 0 {
+			for i, err := range errors {
+				if code, ok := err.Code.Get(); ok {
+					fmt.Printf("Error %d Code: %s\n", i+1, code)
+				}
+				if message, ok := err.Message.Get(); ok {
+					fmt.Printf("Error %d Message: %s\n", i+1, message)
+				}
+			}
+		}
+		fmt.Println("\nPlease wait a moment and try again.")
+		log.Fatalf("Rate limit exceeded")
+	}
+
+	// Type assert to GetConnectionsResponse
+	response, ok := resp.(*management_api.GetConnectionsResponse)
+	if !ok {
+		log.Fatalf("Unexpected response type: %T\n\nThis might indicate an API change or an unhandled error response.", resp)
+	}
+
+	// Display response metadata
+	fmt.Println("=== Response ===")
+	if code, ok := response.Code.Get(); ok {
+		fmt.Printf("Code: %s\n", code)
+	}
+	if message, ok := response.Message.Get(); ok {
+		fmt.Printf("Message: %s\n", message)
+	}
+	fmt.Printf("Connections Count: %d\n", len(response.Connections))
+	if hasMore, ok := response.HasMore.Get(); ok {
+		fmt.Printf("Has More: %v\n", hasMore)
+	}
+
+	// Verify connection properties are populated (the fix)
+	fmt.Println("\n=== Connection Details ===")
+	if len(response.Connections) == 0 {
+		fmt.Println("No connections found for this organization.")
+		fmt.Println("(This is expected if the organization has no connections configured)")
+		return
+	}
+
+	allPopulated := true
+	for i, conn := range response.Connections {
+		fmt.Printf("\nConnection %d:\n", i+1)
+
+		// Check ID
+		if conn.ID.IsSet() {
+			if id, ok := conn.ID.Get(); ok {
+				fmt.Printf("  ✓ ID: %s\n", id)
+			}
+		} else {
+			fmt.Printf("  ✗ ID: NOT SET (BUG DETECTED)\n")
+			allPopulated = false
+		}
+
+		// Check Name
+		if conn.Name.IsSet() {
+			if name, ok := conn.Name.Get(); ok {
+				fmt.Printf("  ✓ Name: %s\n", name)
+			}
+		} else {
+			fmt.Printf("  ✗ Name: NOT SET (BUG DETECTED)\n")
+			allPopulated = false
+		}
+
+		// Check Display Name (optional)
+		if conn.DisplayName.IsSet() {
+			if displayName, ok := conn.DisplayName.Get(); ok {
+				fmt.Printf("  ✓ Display Name: %s\n", displayName)
+			}
+		} else {
+			fmt.Printf("  - Display Name: (not set, optional)\n")
+		}
+
+		// Check Strategy
+		if conn.Strategy.IsSet() {
+			if strategy, ok := conn.Strategy.Get(); ok {
+				fmt.Printf("  ✓ Strategy: %s\n", strategy)
+			}
+		} else {
+			fmt.Printf("  ✗ Strategy: NOT SET (BUG DETECTED)\n")
+			allPopulated = false
+		}
+	}
+
+	// Final result
+	fmt.Println("\n=== Test Result ===")
+	if allPopulated {
+		fmt.Println("✅ SUCCESS: All connection properties are populated!")
+		fmt.Println("   The fix is working correctly.")
+	} else {
+		fmt.Println("❌ FAILURE: Some properties are empty!")
+		fmt.Println("   The bug still exists - properties should not be empty.")
+		os.Exit(1)
+	}
+}

frameworks/gin_kinde/gin_kinde.go

@@ -355,7 +355,9 @@ func UseKindeAuth(router *gin.RouterGroup, kindeDomain, clientID, clientSecret,
 			if kindeClient, ok := client.(authorization_code.IAuthorizationCodeFlow); ok {
 
 				if isAuthenticated, _ := kindeClient.IsAuthenticated(context.Background()); !isAuthenticated {
-					authURL := kindeClient.GetAuthURL()
+					// Check for invitation_code query parameter
+					invitationCode := ctx.Query("invitation_code")
+					authURL := kindeClient.GetAuthURLWithInvitation(invitationCode)
 					ctx.Redirect(302, authURL)
 					ctx.Abort()
 				}

kinde/management_api/generate.go

@@ -1,4 +1,4 @@
 package management_api
 
-//go:generate go run github.com/ogen-go/ogen/cmd/ogen --target . -package management_api --clean https://api-spec.kinde.com/kinde-management-api-spec.yaml
+//go:generate go run github.com/ogen-go/ogen/cmd/ogen --target . -package management_api --clean spec/kinde-management-api-spec.yaml
 //go:generate go run fix_optstring.go