Remove cookie-setting from /validate-otk endpoint

Shipped

14 அக்டோபர், 2025 அன்று 3:35 AM UTC

Author

snadjafinia

Commit

393deae

Simplification: - /validate-otk endpoint now only returns *** ID and TTL - No longer sets cookies (Next.js handles this directly) - Added getSessionTtlSeconds() helper method to KSessionService Rationale: - Next.js validates OTK directly from Redis now - No need for SecurityService to set cookies - Next.js sets its own client-accessible *** cookie - Cleaner separation of concerns