hint "The anti-CSRF cookie was found but the CSRF token was not included in the HTTP request body (csrf_token) nor in the HTTP Header (X-CSRF-Token)." reject_reason "The HTTP Cookie Header was set and a CSRF token was sent but they do not match. We recommend deleting all cookies for this domain and retrying the flow.

hackerman sir ?

Ory Identities and your UI must be hosted on same top level domain! You can't host Ory Identities and your UI on separate top level domains: •

<http://kratos.bar.com|kratos.bar.com>

and

<http://ui.bar.com|ui.bar.com>

will work; •

<http://kratos.bar.com|kratos.bar.com>

and

<http://bar.com|bar.com>

will work; •

<http://kratos.bar.com|kratos.bar.com>

and

<http://not-bar.com|not-bar.com>

won't work.

in our case .stackways.io