Hello team We use ory hydra in an k8s cluster Hydra image version is v26.2.0 Its being exposed with http and on top of if we have kong ingress which is also http and on top of kong we have elb where we do tls termination So elb(https) - kong (http) - hydra (http) So in hydra we use the issuer url with https domain pointing to elb We use in an authcode flow , so after login , during loginverifier we get the request is not allowed the csrf value from the token does not match the csrf value from the data store I suspect its due to the hydra urls are https but actually hydra use http