Transport a session token is valid for. Cookie sessions and bearer access tokens are signed with the same key, so without this claim either could be replayed as the other.
Transport a session token is valid for. Cookie sessions and bearer access tokens are signed with the same key, so without this claim either could be replayed as the other.