Invalidate existing session before validating OTK

Shipped

November 26, 2025 at 9:53 PM UTC

Author

snadjafinia

Commit

a230292

- Check for existing *** cookie in validate request - Clear and delete any existing session before validating OTK - Verify session data is not empty JSON (cleared session) - Prevents reusing old sessions during login flow - Reject validation if session is empty or invalid