Hi all. I'm using the Ory Kratos browser login flo...
# ory-selfhosting
s
Hi all. I'm using the Ory Kratos browser login flow, and when that is successful the session cookie is set on the browser. Is there a specific reason the value of this cookie is not URI encoded? Or there is no option for it? From what I've seen it is not mandated by RFC, but seen as best practice for compatibility, https://stackoverflow.com/questions/49205195/should-cookie-values-be-url-encoded. FYI, I'm creating a custom integration with Next.js which automatically encodes cookie values when I proxy requests to Kratos through there. I am calling the
/session/whoami
endpoint in a middleware to check for a valid session with the cookie. Kratos of course doesn't expect the cookie value to be encoded since this was done by Next.js. So the session is not seen as valid since the values won't be equal. There are some workarounds I can do on the Next.js side to avoid this. Still interested to learn if anything might by possible on the Kratos side though 🙂