OpenAI Access Token

Description

General

• Documentation: https://developers.openai.com/apps-sdk/build/auth
• Summary: OpenAI platform authentication tokens are OAuth2/OIDC JWTs issued by auth.openai.com (current) or auth0.openai.com (legacy). They sign users in to OpenAI products and authorise API calls to the OpenAI platform (audience https://api.openai.com/v1) on the user's behalf; the access token is the one carrying the granted scopes in a non-empty scp/scope claim.

Revoke the secret

Access tokens cannot be revoked individually; logging the user out of all sessions (ChatGPT settings > Security > Log out of all devices) invalidates the tokens issued for that user. Server-side revoked tokens are rejected with 401 token_invalidated.

Details for OpenAI Access Token

• Family: token

• Category: ai

• Company: OpenAI

• High recall: False

• Validity check available: True

• Analyzer available: False

• Revoker available: False

• On-premise instances exist: False

• Only valid secrets raise an alert: False

• Occurrences found for one million commits: 2.06

• Prefixed: False