We upgraded fernet to the latest but there's still some code to fallback to the legacy fernet: https://github.com/heroku/identity/pull/205. The TTL for cookie is 2592000 sec (30 days). We should be able to safely remove the old fernet code in 30 days from now.
dmcinnes
commented
8 years ago
We upgraded fernet to the latest but there's still some code to fallback to the legacy fernet: https://github.com/heroku/identity/pull/205. The TTL for cookie is 2592000 sec (30 days). We should be able to safely remove the old fernet code in 30 days from now.