Expired50% confidenceFactExact time
A third party holding a valid Session Token can fully impersonate the user and perform all operations before the token expires (OpenAI's token validity period typically ranges from a few hours to 30 days).
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/5/2026
First Seen
This claim has expired. It is kept for the record and no longer describes the current state.
Valid until: 10/3/2026(expired)
Sources
Related Claims
UnverifiedOpenAI's Session Token is typically named `__Secure-next-auth.session-token`, with a validity period that generally ranges from a few hours to 30 days.80% similarUnverifiedOpenAI API的缓存时间约为1小时64% similarUnverifiedUploading a mini program does not equal official launch; it still requires submission to WeChat's official review, with a review cycle typically of 1 to 3 business days.63% similarUnverifiedAFK agents can consume within a few hours an amount of tokens equivalent to several weeks of interactive use by a human developer.63% similarUnverified使用 IAM Identity Center（单点登录）时临时凭证通常在一小时后过期61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112583API
curl https://kongchang.com/api/v1/knowledge/claims/112583MCP
get_claim(id=112583)