Join Slack
Powered by
<@U04UQ68083H> will the registration flow drop the...
# ory-copilot
r
rough-kilobyte-98919
09/08/2025, 6:36 AM
@chilly-king-10285
will the registration flow drop the JWT in the cookies or header upon completing the whole flow
c
chilly-king-10285
09/08/2025, 6:36 AM
A message from
kapa.ai
chilly-king-10285
09/08/2025, 6:36 AM
Short answer: No. - The registration flow sets an Ory session cookie on success only if the “session” after-hook is enabled; otherwise it just returns/redirects with the created identity. It does not issue a JWT by default (cookies contain the session, not a JWT) ([Successful registration](
https://www.ory.sh/docs/kratos/self-service/flows/user-registration#successful-registration
)). - For browser flows, success results in a 303 redirect; with the session hook enabled, a Set-Cookie header with the Ory session cookie is included. No JWT is placed in cookies or headers by the registration flow itself ([Successful registration – server-side](
https://www.ory.sh/docs/kratos/self-service/flows/user-registration#successful-registration
), [Client-side browser clients](
https://www.ory.sh/docs/kratos/self-service/flows/user-registration#client-side-browser-clients
)). - For API/native clients, with the session hook enabled, the response JSON includes session and session_token; still no JWT is issued automatically ([API clients](
https://www.ory.sh/docs/kratos/self-service/flows/user-registration#api-clients
), [Actions: Sign in after registration](
https://www.ory.sh/docs/actions/session
)). If you need a JWT, use a tokenizer/JWT template or a proxy that converts sessions to JWTs (e.g., Ory Proxy or session-to-JWT configuration). The sources above do not show JWTs being set by the registration flow itself.
Open in Slack
Previous
Next