I’m trying to implement a standard login flow for spa app and everything works until I submit the form - I get 200 and redirect back to target page, I do see

redirect_to

and

csrf

values in cookie but values for tokens are missing. Any idea what might be missing in config yaml? Some of the parts

replicaCount: 1

database:
  connectionName: <myconnectionname>
environment:
  name: my-stage-env
ingress:
  dnsName: <my-dns>

kratos:
  config:
    log:
      level: info
    secrets:
      cookie:
        # This is an example; secret must be this length (32 chars).
        - deVuA0F46ZWFh3v4wGPVEQDlVXMbLKzG
      session:
        # Change this to values such as '1s', '1m', etc. to see how Kratos handles invalidating a session.
        lifespan: 1h
    serve:
      public:
        base_url: <https://my-backend-url.com/>
        cors:
          allowed_origins:
            - <http://localhost:5000>
            - <https://my-frontend-url.com>
          allowed_methods:
            - POST
            - GET
            - PUT
            - PATCH
            - DELETE
          allowed_headers:
            - Authorization
            - Cookie
          exposed_headers:
            - Content-Type
            - Set-Cookie
          enabled: true

    selfservice:
      methods:
        password:
          enabled: true

      default_browser_return_url: <https://my-frontend-url.com/>
      whitelisted_return_urls:
        - <http://localhost:5000/>
        - <https://my-frontend-url.com>
      flows:
        login:
          ui_url: <https://my-frontend-url.com/login-confirm>
          after:
            default_browser_return_url: <http://localhost:5000/>

also have

whitelisted_return_urls

set