Answer prose round 1: 0 🔴, 4 🟡 (0 misread); comments say what the forms post where, restating test comments go

2026-10-31 12:59:28 +01:00
parent 053438f968
commit ccb4d32d39
4 changed files with 7 additions and 8 deletions
@@ -101,7 +101,6 @@ test("collects oidc nodes as SSO providers (text logo = initial), keeping csrf a
 });

 test("the code field takes a pasted code: one-time-code autofill + numeric inputmode + digits, whitespace around them allowed", () => {
-  // The host trims the code before Kratos sees it (routes.ts), so only a stray non-digit is refused.
  const view = buildFlowView(
    flow([
      node({ name: "csrf_token", type: "hidden", value: "tok" }),