I am using /self-service/settings?flow=9abf88a8-f6...
# ory-selfhosting
s
I am using /self-service/settings?flow=9abf88a8-f62d-4a9e-811c-8994acb3ac86 to update a identity. It need Headers with: • Cookie: ory_kratos_session=MTc0NjE4MzM3OXx4T3plMlZ3WlZWYmZqLUxfRzMzOS1GRlB3bVpMc2FaRkhYaGJNaklSOHdHemUzdldIMmlqaW9nbE4wLWk5SkNGZjVLa3pCS2FIWVUzSXdvZl9DdVZBdG9hRDgxQzRDQXY5UlZSdUh5N2JuZjB4NWoxQWg5Qjg1RXllQmZaWFpack9HUV9wdjdGT0JDUzVFYUQ3T2xUeXhxX3NyRTVpbmcwWjZWRWQtZElFcjVsRmVHUExkb0twdXFleXNBdVRzbG5jb1JpbkZpby10RzFCWmpCbnYxNl94a3VJT2xUcDlYOGQzVDd3bTk4eVVaY3NYU2tVOVE1cWRNcHhwaGZEWGlNRlNINWloVFJ5cm85M285bzRnQmd8BKT0bmS9fAVj_FcJieEEOM9q8u2x8sTVdDkgCTSFNHQ= ==> this is authen • Accept: application/json • Cookie: csrf_token_24aea333b35d28c822e467e182874097a6d2ca58de8e4a3a477db6d2b6626306=1g/a3tsEzTKDoF+77SB9cn37mzA0B2l2EMwnAVrBeus=; Path=/; Max-Age=31536000; HttpOnly; Secure; SameSite=Lax= ==> this from the /self-service/settings/browser for csrf-token I get the response
Copy code
{
  "error": {
    "id": "security_csrf_violation",
    "code": 403,
    "status": "Forbidden",
    "reason": "Please retry the flow and optionally clear your cookies. The request was rejected to protect you from Cross-Site-Request-Forgery (CSRF) which could cause account takeover, leaking personal information, and other serious security issues.",
    "details": {
      "docs": "<https://www.ory.sh/kratos/docs/debug/csrf>",
      "hint": "The anti-CSRF cookie was found but the CSRF token was not included in the HTTP request body (csrf_token) nor in the HTTP Header (X-CSRF-Token).",
      "reject_reason": "The HTTP Cookie Header was set and a CSRF token was sent but they do not match. We recommend deleting all cookies for this domain and retrying the flow."
    },
    "message": "the request was rejected to protect you from Cross-Site-Request-Forgery"
  }
}
please guide me anything to fix, thanks!
c
Hey James, we are a couple of customers who actually experience something similar without any luck getting hold of the ory team or anyone else solving this issue for reference see the following: https://ory-community.slack.com/archives/C06RX4S0U04/p1745855207330649
s
Thank you @clever-furniture-50019