Remove cookie-setting from /validate-otk endpoint

Shipped: October 14, 2025 at 3:35 AM UTC
Author: snadjafinia
Commit: 393deae

Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds() helper method to KSessionService Rationale: - Next.js validates OTK directly from Redis now - No need for SecurityService to set cookies - Next.js sets its own client-accessible *** cookie - Cleaner separation of concerns

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free Forever View Pricing