Don't invalidate *** session when it matches the new OTK session

ส่งแล้ว

11 มีนาคม 2569 เวลา 02:08 UTC

ผู้เขียน

kamo

ตั้งค่า

59ffbba

The validate route was deleting the existing *** session from Redis before looking up the OTK. When the OTK pointed to the same session, the lookup would fail with "Session not found or expired". Now only invalidates the old session if its ID differs from the new one.