Troubleshooting

Configuration errors

• Missing publishable key: set NEXT_PUBLIC_VULYO_PUBLISHABLE_KEY and restart the dev server.
• Missing secret key: set VULYO_SECRET_KEY in the server environment.
• Unsupported callback: confirm the application origin and /api/vulyo/callback are allowed.

Session problems

• A signed-in user appears signed out: confirm the Vulyo proxy is on the same application origin.
• Mutations return forbidden: confirm browser requests include the CSRF cookie and same-origin header.
• Redirect loops: add sign-in, sign-up, and public marketing routes to publicRoutes.
• OAuth returns invalid_request: start a new flow so the transaction cookie and PKCE state are regenerated.

Information to collect

Before reporting a problem, record the SDK and framework versions, failing route, error code, browser, and whether the issue occurs in development, production, or both. Never include secret keys or session tokens.