Verified65% confidenceFactExact time
Holding a Session Token allows access to the corresponding service as the user without entering an account name or password.
3
Sources
65%
Confidence
Long-term
Relevance
9/24/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedWhen an identity provider issues an Access Token, it encodes the user's roles, permissions, and organizational affiliation at the moment of issuance, and the token's content remains fixed for its validity period unless it expires or is actively revoked.75% similarUnverifiedAnyone in possession of a session token has nearly the same account control as someone holding the password, until the token expires75% similarUnverified不应将 Token 或 Cookie 分享给任何第三方，因为一旦获取即等同于获得账号在有效期内的完整访问权限74% similarUnverifiedAn account session credential (Token) is an encrypted string issued by the server to the browser after a user successfully logs in, used to prove that the visitor has passed identity verification.74% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/946004API
curl https://kongchang.com/api/v1/knowledge/claims/946004MCP
get_claim(id=946004)