MOBIUSI INCThis benchmark contains source code examples and analysis data covering session establishment, access context changes, periodic reauthentication, token invalidation, and permission revocation. Lifecycle stages, security control indicators, evidence snippets, and zero-trust access control scores support evaluation of whether implementations continuously verify identity, context, and permissions throughout a session. It is designed for code reasoning, zero-trust control verification, and session security analysis.
| Field | Type | Description |
|---|---|---|
| file_name | string | File name |
| source_code | string | The source code under analysis, focused on session management and access control. |
| analysis_summary | string | A concise summary of session lifecycle implementation, reauthorization mechanisms, token handling, permission revocation, and the level of zero-trust enforcement. |
| evidence_snippets | array | Key code snippets or code location notes supporting lifecycle analysis and zero-trust assessment. |
| security_findings | array | Session security controls, defects, bypass risks, or implementation gaps identified in the code. |
| programming_language | string | The programming language inferred from the source code syntax. |
| session_lifecycle_stages | array | Session lifecycle stages inferred from the source code and ordered by execution or reasoning sequence. |
| zero_trust_compliance_level | string | An overall assessment of whether the code continuously enforces zero-trust access controls. |
| immediate_revocation_effective | boolean | Whether revoking a permission immediately prevents subsequent access rather than relying on stale local caches or long-lived session state. |
| permission_revocation_detected | boolean | Whether the implementation handles revocation of user, role, resource, or session permissions. |
| session_establishment_detected | boolean | Whether the implementation includes session creation, authentication context initialization, or access session establishment. |
| zero_trust_access_control_score | number | A score from 0 to 100 based on implementation characteristics such as continuous authentication, least privilege, context awareness, token validation, and permission revocation. |
| context_change_handling_detected | boolean | Whether the implementation handles changes in access context, such as device, network, location, user attributes, or resource state. |
| periodic_reauthentication_detected | boolean | Whether the implementation triggers reauthentication based on elapsed time, session state, or changes in risk. |
| session_termination_on_invalid_token | boolean | Whether an invalid or expired token causes the session to terminate, access to be denied, or session state to be cleared. |
| token_invalidation_handling_detected | boolean | Whether the implementation handles expired or invalid tokens, token validation failures, or token refresh failures. |
| continuous_access_evaluation_detected | boolean | Whether access is evaluated throughout the session based on identity, context, token, and permission status. |
| authorization_recheck_on_context_change | boolean | Whether identity, permission, or policy checks are rerun after a context change instead of relying on the previous authorization decision. |
| Authorization Type | Proprietary - Commercial AI Training License (No Redistribution) |
| Commercial Use | Requires exclusive subscription or authorization contract (monthly or per-invocation charging) |
| Privacy and Anonymization | No PII, no real company names, simulated scenarios follow industry standards |
| Compliance System | Compliant with China's Data Security Law / EU GDPR / supports enterprise data access logs |

Post a request and let data providers reach out to you.
@dataset{Mobiusi2026,
title={Continuous Session Reauthorization Code Benchmark Dataset},
author={MOBIUSI INC},
year={2026},
url={https://www.mobiusi.com/datasets/b09a6278c31a101b974d96d149f99c7c},
urldate={2026-10-27},
keywords={continuous session reauthorization,zero-trust code dataset,session lifecycle analysis,code security benchmark,continuous access evaluation,token invalidation detection,permission revocation detection,access control verification},
version={1.0}
}Using this in research? Please cite us.