← registry

FD-2026-005 Token expires mid-session (Entra ID pattern)

status moderate authreal-worldretryable

Anatomy

OAuth access tokens expire mid-session. The API starts answering 401 with WWW-Authenticate describing an invalid_token. Correct clients refresh once and replay; broken ones retry the dead token in a loop or fail the user session entirely.

Source: Microsoft identity platform — access token lifetime

Replay it

curl -i https://faultydata.com/r/FD-2026-005
// response appears here

Signature

{Status:401 Headers:map[WWW-Authenticate:Bearer error="invalid_token", error_description="The access token expired"] Body:{"error":{"code":"InvalidAuthenticationToken","message":"Access token has expired or is not yet valid."}} Corrupt: Delay:<nil> Flaky:<nil> Sequence:<nil> Drip:<nil> StallAfter:0 Hang:false Phases:[]}