remove legacy cookie and renamed cookie

Author: Andrei Neagu

packages/settings-library/src/settings_library/utils_session.py

@@ -2,7 +2,8 @@
 import binascii
 from typing import Final
 
-DEFAULT_SESSION_COOKIE_NAME: Final[str] = "osparc-sc"
+DEFAULT_SESSION_COOKIE_NAME: Final[str] = "osparc-sc-v2"
+DEFAULT_SESSION_COOKIE_NAME_LEGACY: Final[str] = "osparc-sc"
 _32_BYTES_LENGTH: Final[int] = 32
 
 

services/web/server/src/simcore_service_webserver/login/_auth_handlers.py

@@ -10,6 +10,7 @@
 from servicelib.logging_utils import get_log_record_extra, log_context
 from servicelib.mimetype_constants import MIMETYPE_APPLICATION_JSON
 from servicelib.request_keys import RQT_USERID_KEY
+from settings_library.utils_session import DEFAULT_SESSION_COOKIE_NAME_LEGACY
 from simcore_postgres_database.models.users import UserRole
 
 from .._meta import API_VTAG
@@ -270,7 +271,9 @@ async def login_2fa(request: web.Request):
     # dispose since code was used
     await delete_2fa_code(request.app, login_2fa_.email)
 
-    return await login_granted_response(request, user=dict(user))
+    response = await login_granted_response(request, user=dict(user))
+    response.del_cookie(DEFAULT_SESSION_COOKIE_NAME_LEGACY)
+    return response
 
 
 class LogoutBody(InputSchema):