diff --git a/README.md b/README.md index db4fb75..42efd36 100644 --- a/README.md +++ b/README.md @@ -91,7 +91,7 @@ Session tokens are how your browser stays logged in. This tool uses them to acce | Provider | Cookie Name | Lifetime | Expiry Detection | |----------|-------------|----------|-----------------| -| ChatGPT | `__Secure-next-auth.session-token` | ~7 days | JWT `exp` claim (decoded automatically) | +| ChatGPT | `__Secure-next-auth.session-token.0` + `.1` | ~7 days | JWT `exp` claim (decoded automatically) | | Claude | `sessionKey` | ~30 days | Only detectable via 401 response | ### Finding Tokens in Chrome DevTools @@ -102,7 +102,11 @@ Session tokens are how your browser stays logged in. This tool uses them to acce 4. In the left panel, expand **Cookies** and click the site URL 5. Find the cookie by name and copy its **Value** -**ChatGPT:** go to `https://chatgpt.com` → find `__Secure-next-auth.session-token` → copy Value (starts with `eyJ`) +**ChatGPT:** go to `https://chatgpt.com` → find **two** cookies: +- `__Secure-next-auth.session-token.0` — copy Value (starts with `eyJ`) → `CHATGPT_SESSION_TOKEN` +- `__Secure-next-auth.session-token.1` — copy Value → `CHATGPT_SESSION_TOKEN_1` + +ChatGPT splits large session tokens across two cookies to stay under the browser's 4KB cookie limit. Both are required. **Claude:** go to `https://claude.ai` → find `sessionKey` → copy Value @@ -138,7 +142,8 @@ cp .env.example .env | Variable | Description | |----------|-------------| -| `CHATGPT_SESSION_TOKEN` | Your ChatGPT JWT session token (`eyJ…`) | +| `CHATGPT_SESSION_TOKEN` | ChatGPT session token chunk `.0` (starts with `eyJ…`) | +| `CHATGPT_SESSION_TOKEN_1` | ChatGPT session token chunk `.1` (the remainder) | | `CHATGPT_PROJECT_IDS` | Comma-separated ChatGPT project IDs (see below) | | `CLAUDE_SESSION_KEY` | Your Claude session key |