Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

It's a bit hard to tell even from the debug logs, is this indicative of a CORS failure?

`[cors] 2022/05/17 20:52:38 Handler: Actual request`
`[cors] 2022/05/17 20:52:38   Actual request no headers added: missing origin`

I want to say yes considering the context, but there's no further output and the rest of the logs indicate failure for unrelated reasons.

seems like it, are you seeing errors on your frontend?

Frontend works without issue, this appears specifically when making requests to Kratos from Oathkeeper using the `cookie_session`  authenticator

Hard to tell if Oathkeeper is maybe stripping the origin