- Shipped
- August 28, 2026 at 12:49 AM UTC
- Author
- Kamo
- Commit
- 3bbafd8
The endpoint existed to turn an existing *** cookie into an OTK and a redirect so the login page could forward a signed-in member straight into their workspace. That forwarding was removed in the previous commit — it made the sign-in form unreachable for anyone already signed in — and nothing has called this since. Checked before deleting, because an endpoint is reachable by things a grep of one repository will not show: no caller in any repository here, no ingress or proxy rule naming the path, and its only import (app/lib/redis) is still used by four other routes, so nothing is orphaned. kamo-register's autoLoginHost is unrelated despite the name — it deep-links to /validate?otk=, a different mechanism. Also clears what the deletion would have left dangling: /api/trial-status documented itself as mirroring "the org lookup in /api/auto-login", and the logout page plus five [AUTO-LOGIN] log tags described a flow that no longer exists.