transient_payload is not propagated to all settings webhooks
Author: icamysCreated Sep 17, 2026Updated Sep 17, 2026
Labelsbug
Preflight checklist
- I could not find a solution in the existing issues, docs, nor discussions.
- I agree to follow this project's Code of Conduct.
- I have read and am following this repository's Contribution Guidelines.
- I have joined the Ory Community Slack.
- I am signed up to the Ory Security Patch Newsletter.
Ory Network Project
No response
Describe the bug
The transient_payload is not passed down to the settings flow webhooks for most of the strategies.
Reproducing the bug
- Configure an after-settings web hook for the
passwordmethod whose jsonnet body readsctx.flow.transient_payload. - Submit a settings update:
{"method": "password", "password": "...", "transient_payload": {"stuff": "42"}}. - The web hook receives an empty
transient_payloadinstead of the submitted value.
Relevant log output
Relevant configuration
Version
b86338d (latest commit as of the issue creation date)
On which operating system are you observing this issue?
None
In which environment are you deploying?
None
Additional Context
No response
Source: ory/kratos