Hey everyone , I faced this issue since a couple of weeks , I tried lot of ways . I'm trying to perform browser login submit passing :

"csrf_token" => $request->get('csrf_token'),
"identifier" => $request->get('email'),
"method" => "password",
"password" => $request->get('password'),

but always received same error :

+"error": {#379 ▼
        +"id": "security_csrf_violation"
        +"code": 403
        +"status": "Forbidden"
        +"request": "e55e4ad7-e2b2-9306-ae5f-fcea7801c61c"
        +"reason": "Please retry the flow and optionally clear your cookies. The request was rejected to protect you from Cross-Site-Request-Forgery (CSRF) which could cause accoun
 ▶"
        +"details": {#380 ▼
          +"docs": "<https://www.ory.sh/kratos/docs/debug/csrf>"
          +"hint": "The anti-CSRF cookie was found but the CSRF token was not included in the HTTP request body (csrf_token) nor in the HTTP Header (X-CSRF-Token)."
          +"reject_reason": "The HTTP Cookie Header was set and a CSRF token was sent but they do not match. We recommend deleting all cookies for this domain and retrying the flow."
        }
        +"message": "the request was rejected to protect you from Cross-Site-Request-Forgery"
      }