Unverified50% confidenceFactExact time
Short-term tokens are issued through mechanisms such as STS (Security Token Service), with validity periods ranging from a few minutes to a few hours, and are bound to specific permission scopes, so an attacker who obtains an expired token cannot reuse it.
1
Sources
50%
Confidence
Long-term
Relevance
10/21/2026
First Seen
Sources
LiteLLM 1.107.0 Caught in Supply Chain Attack: Credential Stealer and Backdoor Planted in PyPI Package
hackernewshackernews10/21/2026
Related Entities
Related Claims
UnverifiedIn traditional web applications, access tokens are typically set with short expiration periods (such as 15 minutes to 1 hour), combined with refresh tokens to achieve seamless renewal.70% similarUnverified常见JWT安全实践包括将Access Token有效期压缩至15分钟并配合Refresh Token续签，以及在微服务间使用RS256非对称算法传递身份信息68% similarUnverifiedTokenRouter's captured body retention period is limited by plan: Starter 7 days, Team 30 days, Enterprise 90 days, and a shorter window can also be chosen, and administrators can wipe all data with one click.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1081547API
curl https://kongchang.com/api/v1/knowledge/claims/1081547MCP
get_claim(id=1081547)