Expired50% confidenceFactExact time
The Session Token generated after logging into OpenAI typically uses JWT format and is stored via Set-Cookie under the name __Secure-next-auth.session-token, with HttpOnly and Secure flags set.
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/5/2026
First Seen
Valid until: 10/3/2026(expired)
Sources
Related Claims
Unverified传统Web应用中主体身份通常通过JWT令牌、Session Cookie或OAuth 2.0的access token来确定79% similarUnverifiedCookie通常设置HttpOnly标志，使JavaScript无法直接读取，以防范跨站脚本（XSS）攻击71% similarUnverifiedJWT (JSON Web Token) encodes user information in an encrypted form for the client to carry, and the server confirms identity by verifying the signature, making it especially suitable for distributed systems.70% similarUnverifiedWeb端遵循RFC 6265标准Cookie规范，身份状态以HttpOnly、Secure标记的会话Cookie存储在浏览器沙箱中，不涉及设备级API调用70% similarUnverifiedPublic-network MCP tools commonly use the JWT (JSON Web Token) authentication standard (RFC 7519), where a JWT token consists of three parts: Header, Payload, and Signature.66% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112581API
curl https://kongchang.com/api/v1/knowledge/claims/112581MCP
get_claim(id=112581)