Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

image.png

Hey. After a user sits on the default account experience login page for about 30 minutes and then tries to login, they get an error that their login flow is expired. I tried extending the lifespan of the login flow to at least reduce the chance that a user sees the issue, but now they get a different error that's a bit more cryptic. Thoughts on this, is this a known issue? It is a bit of an edge case so we aren't super concerned about it, but it is a little rough

Please create a ticket in the Ory/kratos GitHub repo. IMO, the “flow expired” error should just redirect to a new flow in browser contexts. 

<https://github.com/ory/kratos/issues/4097>