Hi! I'm trying to use Kratos & Hydra When logging in to Kratos using OIDC method, the flow reaches the consent endpoint, consent is accepted, and then my browser redirects back to Kratos, then it redirects to a Kratos user-facing error endpoint, instead of signing up the user and creating a session (I also configured Kratos to log in the user after sign up with hooks). https://mywebsite.com/consent?consent_challenge=fbdae889e66240089c6941dd7a8b4f92 -> https://mywebsite.com/hydra/oauth2/auth?client_id=agamon&consent_verifier=01d08bb1ad814bdeac1206aa89c6ca89&redirect_uri=https%3A%2F%2Fmywebsite.com%2Fkratos%2Fself-service%2Fmethods%2Foidc%2Fcallback%2Fhydra&response_type=code&scope=openid+offline&state=fe6130ca-e1a7-4bbf-a4c9-889cd3923c29 -> https://mywebsite.com/kratos/self-service/methods/oidc/callback/hydra?code=HuVr[…]=openid+offline&state=fe6130ca-e1a7-4bbf-a4c9-889cd3923c29 -> https://mywebsite.com/error?id=2e1e2710-a2d8-47f6-a44e-93917372b53c The error:

{
  "id": "2e1e2710-a2d8-47f6-a44e-93917372b53c",
  "error": {
    "id": "self_service_flow_expired",
    "code": 410,
    "reason": "The self-service flow expired 230.94 minutes ago, initialize a new one.",
    "status": "Gone",
    "message": "self-service flow expired"
  },
  "created_at": "2022-09-20T23:21:40.514419-04:00",
  "updated_at": "2022-09-20T23:21:40.514419-04:00"
}

Not sure which self-service flow is mentioned here, the login flow was initalized a few minutes prior.

Hi, could you double check the time of the container running your kratos instance? Could it be possible that the time got out of sync somehow?

I'm not running it in a container. It's a systemd service

Okay, what about the host running it then?

Both Hydra and Kratos run on the same host. Why would they be out of sync?

I don’t think the issue has anything to do with hydra. The flow in question should be a kratos login flow, which is stored in a database. Without knowing the actual data, I guess the issue could be related to that? Which database are you using? Is it running on the same host?

Yes, I'm running the services on the same host, including the PostgreSQL server they're all using.

Hm, that’s super weird then. Especially because the expiry says 3,8h. Could you open an issue on the kratos repository?

I've opened an issue.