Third-party resource verifying a session token

Not sure if it’s too late or still interested, but for others who may have a similar question in the future:

Related: