Sean Hammond

Remove no-longer-needed transitional cookie code

3

Remove some code to do with transitioning already-logged-in users to our new separate API auth cookie. This code is no longer needed once all production users have been transitioned. **This...

## Context h uses two separate authentication cookies: an HTML auth cookie is used to authenticate requests for HTML pages, and a separate API auth cookie is used to authenticate...

Depends on https://github.com/hypothesis/h/pull/9029.

Depends on https://github.com/hypothesis/h/pull/9032

Poor behavior when users get logged out but still have pages open

2

Related: https://github.com/hypothesis/h/issues/8949 Inactive h users get logged out after [seven days](https://github.com/hypothesis/h/blob/d299bd64472f2a147ecea9ad89783b71f0e93aec/h/services/auth_ticket.py#L9) when their auth ticket expires, whereas active h users get logged out every [thirty days](https://github.com/hypothesis/h/blob/d299bd64472f2a147ecea9ad89783b71f0e93aec/h/security/policy/top_level.py#L45) when their auth cookie...

Dan reported that he was getting logged out of the client on Via every day or two: https://hypothes-is.slack.com/archives/C4K6M7P5E/p1729194341381529