Ory is the largest open source community in the world for cloud software application security. We maintain advanced open source security software solving authentication, authorization, access control, application network security, and delegation. Ory implements a variety of industry and best-practice standards including OAuth 2.0 / OAuth 2.1, OpenID Connect, Zero Trust Networking, Google Zanzibar Policy Framework, FIDO2 U2F, WebAuthn, TOTP, and more.

Ory Community

Kratos version `v0.11.0`. It seems that the lifespan specified is not respected and flow is expired before the lifespan (I think within 15 min or 1hr). I don’t think there is something wrong with the configuration,  what possibly could be the issue??

<@U011D3UQKNY> <@U010F2N7G2X> can you please help here?

Hello Uzair.
Are you hosting Ory Kratos yourself? If yes, how are you running it?

What does your request look like? Is the request reaching Kratos properly?

<@U042D9WJAKX> are you sure about this? If create a recovery flow, the expiry date is inside the payload. Could you verify that it is set there?

by default recovery is set to 1 hour expiry.

yes, the request is reaching Kratos I could see the logs mentioning flow expired

Figured out, I am making POST request to recovery endpoint and was passing only `id` to it, and expecting `expiry` would be same as defined in configuration