boundless-ambulance-56979
03/25/2025, 8:04 AMbrief-egg-61061
03/25/2025, 8:04 AMbrief-egg-61061
03/25/2025, 8:04 AMkratos config for setting cookies properties/session/properties/cookie/additionalProperties
. However, I can provide you with information about cookie configuration in Ory Kratos based on the available documentation. Ory Kratos allows you to configure cookies in several ways: ### General Cookie Settings yaml cookies: domain: <http://www.cookies.com|www.cookies.com> path: /cookies same_site: Lax
### Session Cookie Settings yaml session: cookie: domain: <http://my-domain.com|my-domain.com> path: / same_site: Strict name: your_cookie_name persistent: false
The additionalProperties
setting is mentioned in the context of identity schemas, where you can use it to keep your identities clean by denying additional properties: yaml { properties: { traits: { type: "object", properties: { // ... }, additionalProperties: false, }, }, }
However, the knowledge sources don't provide the full schema specifically for session/properties/cookie/additionalProperties
. For cookie configuration, you should be aware of these important points: 1. HTTP Cookies aren't port specific 2. Unless --dev
is set, Ory Kratos' cookies are only sent over HTTPS 3. Cookies in Ory Kratos are always httpOnly
4. You can set cookies for parent domains from subdomains, but not across different top-level domains [Cookie settings](https://www.ory.sh/docs/kratos/guides/configuring-cookies) and [Advanced base URL, CSRF and session cookie settings](https://www.ory.sh/docs/kratos/guides/multi-domain-cookies) provide more details about configuring cookies in Ory Kratos.