Python SDK "return_session_token_exchange_code" ignored due to casing constraint

[ngc7293]

Preflight checklist

• I could not find a solution in the existing issues, docs, nor discussions.
• I agree to follow this project's Code of Conduct.
• I have read and am following this repository's Contribution Guidelines.
• I have joined the Ory Community Slack.
• I am signed up to the Ory Security Patch Newsletter.

Ory Network Project

No response

Describe the bug

When create a new native login flow using the Python SDK, the return_session_token_exchange_code optional parameter is ignored.

This seems to be due to how Python's urllib3 serializes boolean values using Python casing ("True" / "False"), which is incompatible with the backend's strict casing (only checks for egality with "true", see here).

The Python SDK does not allow for non-boolean values (like str("true")), so I could not find any workaround besides performing the requests manually with requests.

Reproducing the bug

1. docker compose -f quickstart.yml up
2. run the following Python commands:

from ory_client.api.frontend_api import FrontendApi
from ory_client.configuration import Configuration
from ory_client.api_client import ApiClient
config = Configuration(host="http://localhost:4433/")
client = ApiClient(config)
api = FrontendApi(client)
flow = api.create_native_login_flow(return_session_token_exchange_code=True)

3. Observe the flow object does not contain the expected session_token_exchange_code attribute.

assert "session_token_exchange_code" in flow

Relevant log output

No response

Relevant configuration

No response

Version

master, 1.1.0

On which operating system are you observing this issue?

Linux

In which environment are you deploying?

Docker Compose

Additional Context

No response

[ngc7293]

After some more digging this seems to be a more generalized issue, it can also be reproduced with the refresh=True parameter:

from ory_client.api_client import ApiClient
config = Configuration(host="http://localhost:4433/")
client = ApiClient(config)
api = FrontendApi(client)
flow = api.create_native_login_flow(refresh=True)

assert flow["refresh"]  # This will fail