Unverified50% confidenceFactExact time
Some authentication SDKs return a completely new token representing the impersonated user's identity in impersonation scenarios, while others return a token with special claims
1
Sources
50%
Confidence
Long-term
Relevance
9/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen an identity provider issues an Access Token, it encodes the user's roles, permissions, and organizational affiliation at the moment of issuance, and the token's content remains fixed for its validity period unless it expires or is actively revoked.71% similarUnverifiedTop-up services require users to submit the session credentials (Session Token or Cookie) of their accounts; a third party holding these credentials can fully impersonate the user and initiate all operations, including subscription payments, modifying account information, and accessing conversation history.68% similarUnverified将为官方客户端设计的 access token 用于非官方工具可能违反 token 预期使用场景，Cursor 可能通过设备指纹、请求模式分析和异常检测识别后吊销 token 或封禁账号67% similarUnverifiedAfter a user logs in, Cursor stores session credentials (Session Token) locally.65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/944123API
curl https://kongchang.com/api/v1/knowledge/claims/944123MCP
get_claim(id=944123)