Expired50% confidenceFactExact time
A third party holding a valid Session Token can fully impersonate the user and perform all operations before the token expires (OpenAI's token validity period typically ranges from a few hours to 30 days).
1
Sources
50%
Confidence
Medium-term (~90 days)
Relevance
7/5/2026
First Seen
Valid until: 10/3/2026(expired)
Sources
Related Claims
UnverifiedOpenAI's Session Token is typically named `__Secure-next-auth.session-token`, with a validity period that generally ranges from a few hours to 30 days.80% similarUnverifiedOpenAI API的缓存时间约为1小时64% similarUnverified小程序上传并不等于正式上线，还需提交微信官方审核，审核周期通常为1-3个工作日63% similarUnverifiedAFK agents can consume within a few hours an amount of tokens equivalent to several weeks of interactive use by a human developer.63% similarUnverified使用 IAM Identity Center（单点登录）时临时凭证通常在一小时后过期61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/112583API
curl https://kongchang.com/api/v1/knowledge/claims/112583MCP
get_claim(id=112583)