Unverified50% confidenceFactExact time
An access token obtained in exchange for a deleted key remains valid for its duration (typically tens of minutes to one hour), because OAuth tokens are stateless and Azure does not check in real time whether the key still exists during validation.
1
Sources
50%
Confidence
Long-term
Relevance
10/2/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedOAuth tokens typically have expiration times, are revocable, and have clearly defined authorization scopes, making them more secure than static API keys that never expire.79% similarUnverifiedOpenAI login session tokens are typically valid for several days or even longer, and even if a user changes their password, they must actively log out of all devices to invalidate the old tokens.69% similarUnverifiedIn OAuth 2.0, Access Tokens typically expire within 1 hour and need to be exchanged for new ones via a Refresh Token.65% similarUnverifiedAIza系列密钥是长效静态凭证，一旦颁发在未手动撤销前永久有效，不携带过期时间或范围限制元数据64% similarUnverifiedAPI Keys are designed with no concept of expiration and remain valid long-term once generated; whereas tokens have an expiration time and require re-login to obtain after expiry.63% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/967327API
curl https://kongchang.com/api/v1/knowledge/claims/967327MCP
get_claim(id=967327)