Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Due to a small bug in our code, a hand full of projects get 500s on all API calls. If you are affected, please remove your custom hostname &amp; slug URL from the Kratos self-service allowed return url list
We are fixing up the affected projects right now.

This is affecting us.

Edit - Fixed after I updated our identity-config

<@U010UKXCPP0> I noticed when I downloaded my identity-config today, the urls I removed yesterday are back in the `allowed_return_urls` list, and I received an error when I re-uploaded the config with some other, unrelated changes:

`Unable to validate config: I[#/selfservice/allowed_return_urls] S[#/properties/selfservice/properties/allowed_return_urls/uniqueItems] items at index 1 and 2 are equal`

A fix for that is already merged and should be deployed tomorrow, can you remove them again as a workaround for now?