hello, I see that kratos has these err messages below:

A valid session was detected and thus login is not possible. Did you forget to set `?refresh=true`?
A valid session was detected and thus recovery is not possible.
A valid session was detected and thus registration is not possible.

Noted that with the first one, I see that we can overcome by adding

?refresh=true

parameter, but we cannot overcome for the second and third case. My questions are: 1. For the second and third case, the error message means that there is a valid cookie stored at the client side, therefore Ory detects that and blocks? 2. In case we want to solve this, we need to clear Ory cookie at the client side?

Hello Lan, You can revoke the session and let the user log in again/register again. Not sure how the 3rd case would occur IRL. I think in general if they already have a valid session you could redirect them to the app starting page? Or is there a particular reason why you would clear the cookie?

hi @magnificent-energy-493, do we have any utility to check that cookie is still valid? just because I see completely 2 different cases with our web app: • case 1: have cookie, then it's redirected to internal web • case 2: have cookie, but not redirected to internal web. However, when opening forget password link, it raised error above

I see so basically when you have a persistent cookie, the recovery link will always fail?

ok Vincent, let I open a bug ... and I'll find sometime in weekend to fix it

yes there was quite a lot of changes ! https://github.com/ory/kratos/releases/tag/v0.8.0-alpha.1

thanks so much, @magnificent-energy-493, I'll try to reproduce it on v0.8 first

Right, thanks for pointing it out. The changelog is autogenerated so probably some quirk in the script. I will check if it is something obvious.