General after registration hooks running after method specific post registration hooks

[FaeyUmbrea]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Ory Network Project

No response

Describe the bug

If I configure ory kratos to run hooks, I expect hooks configured in the general "hooks" section of the configuration to be run before the hooks in the method specific sections i.e. "oidc -> hooks" are executed. However, due to the oidc hook executing the "session" hook, the hooks in the "hooks" section do no longer execute. Implying that the execution order is inverted.

Reproducing the bug

1. Configure kratos to use a web_hook after registration hook.
2. Configure kratos to use the session hook in the after registration oidc event
3. Attempt to register using oidc
4. Behold as the webhook does not execute

Relevant log output

Relevant configuration

registration:
      lifespan: 10m
      ui_url: http://localhost:5173/registration
      after:
        hooks:
          - hook: web_hook
            config:
              url: http://targeturl.com
              method: ""
              body: base64://jsonnet
        oidc:
          hooks:
            - hook: session

Version

v1.3.1

On which operating system are you observing this issue?

Linux

In which environment are you deploying?

Docker

Additional Context

No response

[vinckr]

This is documented behaviour: https://www.ory.sh/docs/troubleshooting/troubleshoot-actions and probably wontfix (although I can't speak for the maintainers here)

[FaeyUmbrea]

Not quite the bug I am reporting on. You'd of course expect the session hook to end the execution of hooks as per that part of the documentation. The unexpected behaviour is that contrary to the flow diagram provided in the documentation, the OIDC hooks seem to run before the ones denoted in the non-specific "hooks" section. So you have to duplicate hooks you want to run for all flows if any of your flows uses the session hook at all

[FaeyUmbrea]

This is the diagram I am talking about, for reference.

[vinckr]

Thanks for the clarification, that is indeed not how it should work!