hi , everyone . i have strange problem with local ...
# ory-selfhosting
r
hi , everyone . i have strange problem with local kratos , when i try to login or signup with kratos using local kratos , it throw 403 csrf error and the cookies is not generated . this is sometimes happen in chrome but work well on edge and sometimes works on edge and not on chrome . and sometimes both of them not working if , i open the two explorer at the same time what is the problem ??
version: v1.3.1
# dsn: memory # dsn: "sqlite///C/Users/maria/OneDrive/Desktop/ory_keratos/test.db?_fk=true" dsn: "postgres://postgres:password@localhost:5432/local" serve: public: base_url: http://127.0.0.1:4433/ cors: enabled: true allowed_origins: - http://127.0.0.1:8000 allowed_methods: - POST - GET - OPTIONS allowed_headers: - Authorization - Content-Type - X-CSRF-Token allow_credentials: true admin: base_url: http://kratos:4434/ selfservice: default_browser_return_url: http://127.0.0.1:8000/ allowed_return_urls: - http://127.0.0.1:8000 # whitelisted_return_urls: # - http://127.0.0.1:8000 methods: password: enabled: true oidc: enabled: true config: providers: - id: github provider: github client_id: YOUR_GITHUB_CLIENT_ID client_secret: YOUR_GITHUB_CLIENT_SECRET mapper_url: file:///path/to/github_mapper.json scope: - user:email flows: error: ui_url: http://127.0.0.1:8000/error settings: ui_url: http://127.0.0.1:8000/settings privileged_session_max_age: 15m recovery: enabled: true ui_url: http://127.0.0.1:8000/recovery verification: enabled: false ui_url: http://127.0.0.1:8000/verification after: default_browser_return_url: http://127.0.0.1:8000/ logout: after: default_browser_return_url: http://127.0.0.1:8000/login login: ui_url: http://127.0.0.1:8000/login lifespan: 10m registration: lifespan: 10m ui_url: http://127.0.0.1:8000/registration after: password: hooks: - hook: session session: cookie: domain: 127.0.0.1 path: / # same_site: None cookies: domain: 127.0.0.1 path: / # same_site: None log: level: debug format: text leak_sensitive_values: true secrets: cookie: - PLEASE-CHANGE-ME-I-AM-VERY-INSECURE cipher: - 32-LONG-SECRET-NOT-SECURE-AT-ALL ciphers: algorithm: xchacha20-poly1305 hashers: algorithm: bcrypt bcrypt: cost: 8 identity: schemas: - id: default url: file://./identity.schema.json courier: smtp: connection_uri: smtps://test:test@mailslurper:1025/?skip_ssl_verify=true