Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

hello guys, i am trying to configure the kratos-config in the ory cli and i tried to change in the cloud panel but didnt work  and i get this error for cookie domain in ory cly:
- Configuration key `cookies.path` can not be set and will be ignored.
- Configuration key `cookies.domain` can not be set and will be ignored.

the cookies object:
cookies:
  domain: <http://levelupcourses.com|levelupcourses.com>
  path: /
  same_site: Lax

Hello <@U03FTN8P9EK>
Do you have a custom domain configured?
I think you can currently not change the cookie domain through the CLI to protect against CRSF.
You can change the cookie domain in the UI of your custom domain, see screenshot for my project:

but in the cli, the kratos configuration is not with my cookie domain, idk why

Hi <@U03FTN8P9EK>
It does not need to be :slightly_smiling_face:

We set the cookie values per request to your Custom domain value. If you are using the Ory proxy / tunnel, it will set it to the domain it is serving from (overwriting the domain of the cookie we serve you from your project)