Is there a recommended pattern for developing a UI for a kratos hosted in the cloud? E.g. we have Kratos deployed to our dev environment, and we are trying to connect to the APIs to build a UI, however we're running into CSRF issues since Kratos and the localhost UI are not on the same domain. Is there a pattern to solve this other than running kratos locally? We've been looking at Cookie samesite settings and the like.

Does this do anything beyond rewriting cookie domain values? I see it manipulates JWTs but I don't really understand why? Also, there must be a better way to achieve this? Our primary problem right now is with the CSRF cookie domain not CORs, so is there a way to disable that for development?

documentation says to do this:

ory proxy <http://localhost:3000> <https://my-domain.com>

Sorry I don’t really use the proxy, we run kratos through docker for local development, so I can’t be more help

That's where we're headed too, but i'm worried we'll run into CSRF issues if a development ui is on http://localhost:3000 and kratos APIs are at http://localhost:4433