Add note to remind us to remove/update logic handling legacy API keys

aleph/model/role.py

@@ -196,12 +196,16 @@ def by_api_key(cls, api_key):
         q = cls.all()
         q = q.filter_by(api_key=api_key)
         utcnow = datetime.now(timezone.utc)
+
+        # TODO: Exclude API keys without expiration date after deadline
+        # See https://github.com/alephdata/aleph/issues/3729
         q = q.filter(
             or_(
                 cls.api_key_expires_at == None,  # noqa: E711
                 utcnow < cls.api_key_expires_at,
             )
         )
+
         q = q.filter(cls.type == cls.USER)
         q = q.filter(cls.is_blocked == False)  # noqa
         return q.first()