Hello everyone, Im having a strange issue while tr...
# talk-kratos
b
Hello everyone, Im having a strange issue while trying to integrate Ory Kratos into a VueJS website. I am currently working on the registration form side of things and got it displaying correctly on the page using Ajas (axios) The first call works fine:
Copy code
/self-service/registration/browser
Using this I build the form, enter my info and hit submit which goes to:
Copy code
/self-service/registration?flow={flowid}
However im getting back 403 forbidden with the error:
Copy code
{
  "error": {
    "code": 403,
    "status": "Forbidden",
    "reason": "The request was rejected to protect you from Cross-Site-Request-Forgery (CSRF) which could cause account takeover, leaking personal information, and other serious security issues.",
    "details": {
      "docs": "<https://www.ory.sh/kratos/docs/debug/csrf>",
      "hint": "The anti-CSRF cookie was found but the CSRF token was not included in the HTTP request body (csrf_token) nor in the HTTP Header (X-CSRF-Token).",
      "reject_reason": "The HTTP Cookie Header was set and a CSRF token was sent but they do not match. We recommend deleting all cookies for this domain and retrying the flow."
    },
    "message": "the request was rejected to protect you from Cross-Site-Request-Forgery"
  }
}
More specifically:
Copy code
but the CSRF token was not included in the HTTP request body (csrf_token) nor in the HTTP Header (X-CSRF-Token).
However looking at my request, I can clearly see the csrf_token being defined inside of the body: