Troubleshooting

📄️ Invalid courier URL

If you get an error that points you to this document, it means that your email configuration (SMTP URL) is incorrect. The most

When you get 401 Unauthorized or 400 Bad Request responses when your application sends requests to Ory Identities APIs, it is

This document describes common issues with Ory Actions and how to solve them.

After updating their custom domain, some users reported an error that caused the verification emails to come with magic links

BCrypt hashed passwords and secrets have a 72 character limit. This is a limitation of the BCrypt algorithm and the Golang BCrypt

Redirect loops after registration

Iframes can pose a significant security risk for authentication services due to many attack vectors such as clickjacking, iframe

If you're experiencing issues on Ory Network related to the required audience for the

Starting no sooner than August 1st, 2024, Ory Network will enforce the inclusion of redirect_uri in OpenID Connect flow

Relying party ID mismatch

Starting no sooner than April 13, 2025, Ory Network will return a 400 Bad Request instead of a 200 OK when a user signs up

If you receive an error such as

Overview

We are excited to announce the release of version 1.0 of Ory's Software Development Kits (SDKs) for all major languages. As part

Spec-compliant OAuth 2.0 and OpenID Connect is hard. Let's take a look how to resolve certain issues.

Sometimes, calling /oauth2/sessions/logout doesn't behave as expected, for example:

There are multiple ways of authenticating OAuth 2.0 Clients at the /oauth2/token: