Remove cookie-setting from /validate-otk endpoint

OtherSecurityService
Shipped
October 14, 2025 at 3:35 AM UTC
Author
snadjafinia
Commit
393deae

Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds() helper method to KSessionService Rationale: - Next.js validates OTK directly from Redis now - No need for SecurityService to set cookies - Next.js sets its own client-accessible *** cookie - Cleaner separation of concerns

All changes

Like what you see shipping?

Every one of these updates lands in your workspace automatically. Start free and watch it grow week after week.

Start Free ForeverView Pricing