Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi,

We have deployed Kratos to our DEV environment. we made it work with `<http://x.foo.com|x.foo.com>` domain name. we were trying to make same Kratos deployment work with our local development machines too (localhost) however we encountered CSRF issues (No cookie was added in the login page). I added custom host to `localhost`  something like `<http://y.foo.com|y.foo.com>` but it didn’t help. So is there anyway I can configure kratos to work with 2 different domain names, meaning something like <http://foo.com|foo.com> and <http://bar.com|bar.com>? I would appreciate if someone could share a link for a tutorial or any configs needed to do that.

The really short version (IMHO) is to use <http://nip.io|nip.io> instead of all the ports and map that with a reverse or ingress locally. Then you enable cors in kratos. And lbnl, clear all cookies before you try it again.