Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Hello guys,
Something weird is going on: Im trying to login and after login, it redirects me to login and ask me for ‘Please confirm this action by verifying that it is you.’ and it’s just a loop. I can’t login.

No, I have a local nextjs connected to ory.sh

Just redirecting me to ‘Please confirm this action by verifying that it is you.’

can you try to clear the cookies for your domain?

are you by any chance playing around with MFA?

for all accounts or just one account in particular?

I've just come here to ask this exact same question too :eyes:

are you using one of the example repos, or your own code?

<https://trusting-ganguly-v2mftf4988.projects.oryapis.com>

thanks, at least for the managed UI i can not reproduce such an issue, so it appears to be isolated to nextjs. what code are you using for this?

I just integrated the example in my project

which example? could you give me the link?

This one: <https://github.com/ory/kratos-selfservice-ui-react-nextjs/>

Hm, I just ran:

```git clone <https://github.com/ory/kratos-selfservice-ui-react-nextjs.git>
cd kratos-selfservice-ui-react-nextjs
npm i
export ORY_SDK_URL=<https://trusting-ganguly-v2mftf4988.projects.oryapis.com>
npm run start```
but login works well for me. can you try these steps and tell me if you still have issues?

if it works in the example try to work from there and see where the problem happens comared to your code base. when using incognito, it’s also important to close all incongito windows for the browser to get a new session

I know, I also deleted cookies to be sure its not from them

a common mistake might be that the request to `/session/whoami`  goes not to localhost but to <http://oryapis.com|oryapis.com> - can you check whether that’s the case in your app? in chrom dev tools, network tab, you should see `GET <http://localhost/sessions/whoami>`