Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hi, I am currently trying to setup ory for my React SPA using Vite.

I have a context file that is wrapping my application. I am running the ory tunnel with `ory tunnel --project <slug-id> <http://localhost:5173>` . The flow directs me to login and then redirects back to my application, but the whoami request keeps getting 401 and therefore not getting a session

Any advice?

Hello <@U095BJVU327>

could be multiple things :thinking_face:

• Is the session cookie being sent with your request? 
• is <http://localhost:5173> added to allowed CORS origins?
• do you always use <http://localhost:5173> everywhere? it must not be mixed up with 127.0.0.1:5173!
• All requests from your SPA to Ory should go through the Ory Tunnel (`<http://localhost:4000>`), not directly to the Ory Network cloud endpoint.