# Immortal Client-Trusted Session

> A session that never expires and is trusted from client-supplied state alone, so a captured token grants indefinite access.

Record: `lex:immortal-client-trusted-session`
Kind: anti-pattern
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lex-immortal-client-trusted-session

## category

- [Security Privacy Compliance](https://banes-lab.com/records/lex-category/security-privacy-compliance.md)

## referenced-by

- [Session Management](https://banes-lab.com/records/arch/session-management.md)