Unverified50% confidenceFactExact time
Short-lived tokens are typically issued based on OAuth 2.0 or similar mechanisms, have validity periods ranging from a few minutes to several hours, and can be revoked at any time.
1
Sources
50%
Confidence
Long-term
Relevance
10/30/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedIn traditional web applications, access tokens are typically set with short expiration periods (such as 15 minutes to 1 hour), combined with refresh tokens to achieve seamless renewal.72% similarUnverifiedThis OAuth flow follows the OAuth 2.0 Authorization Code Flow, where the server issues short-lived access tokens and refresh tokens, with access tokens typically valid for 1 hour.72% similarUnverifiedOIDC temporary credentials typically have a validity period of only 15 minutes to 1 hour, significantly reducing the exploitable window compared to long-term keys70% similarUnverifiedOAuth 2.0的Access Token通常有效期较短（15分钟到1小时），Refresh Token有效期较长70% similarUnverifiedShort-term tokens are issued through mechanisms such as STS (Security Token Service), with validity periods ranging from a few minutes to a few hours, and are bound to specific permission scopes, so an attacker who obtains an expired token cannot reuse it.68% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1118562API
curl https://kongchang.com/api/v1/knowledge/claims/1118562MCP
get_claim(id=1118562)