We upgraded fernet to the latest but there's still some code to fallback to the legacy fernet: https://github.com/heroku/identity/pull/205. The TTL for cookie is 2592000 sec (30 days). We should be able to safely remove the old fernet code in 30 days from now.
We upgraded fernet to the latest but there's still some code to fallback to the legacy fernet: https://github.com/heroku/identity/pull/205. The TTL for cookie is 2592000 sec (30 days). We should be able to safely remove the old fernet code in 30 days from now.