diff --git a/src/features/authFiles/components/AuthJsonPasteModal.tsx b/src/features/authFiles/components/AuthJsonPasteModal.tsx
new file mode 100644
index 000000000..589d949ce
--- /dev/null
+++ b/src/features/authFiles/components/AuthJsonPasteModal.tsx
@@ -0,0 +1,134 @@
+import { useMemo, useState } from 'react';
+import { useTranslation } from 'react-i18next';
+import { Modal } from '@/components/ui/Modal';
+import { Button } from '@/components/ui/Button';
+import { Input } from '@/components/ui/Input';
+import { Select } from '@/components/ui/Select';
+import type { AuthJsonInputType } from '@/features/authFiles/sessionAuthConverter';
+import styles from '@/pages/AuthFilesPage.module.scss';
+
+type AuthJsonPasteModalProps = {
+  open: boolean;
+  saving: boolean;
+  onClose: () => void;
+  onSave: (type: AuthJsonInputType, fileName: string, jsonText: string) => Promise<void>;
+};
+
+const DEFAULT_FILE_NAME = 'codex-account.json';
+const INVALID_BASE_FILE_NAME_PATTERN = /[\\/:*?"<>|]/;
+
+const isValidBaseJsonFileName = (value: string) =>
+  value.toLowerCase().endsWith('.json') &&
+  !INVALID_BASE_FILE_NAME_PATTERN.test(value) &&
+  !Array.from(value).some((char) => char.charCodeAt(0) < 32);
+
+export function AuthJsonPasteModal({ open, saving, onClose, onSave }: AuthJsonPasteModalProps) {
+  const { t } = useTranslation();
+  const [type, setType] = useState<AuthJsonInputType>('session');
+  const [fileName, setFileName] = useState(DEFAULT_FILE_NAME);
+  const [jsonText, setJsonText] = useState('');
+  const [error, setError] = useState('');
+
+  const resetForm = () => {
+    setType('session');
+    setFileName(DEFAULT_FILE_NAME);
+    setJsonText('');
+    setError('');
+  };
+
+  const handleClose = () => {
+    resetForm();
+    onClose();
+  };
+
+  const options = useMemo(
+    () => [
+      { value: 'cpa', label: t('auth_files.paste_type_cpa') },
+      { value: 'session', label: t('auth_files.paste_type_session') },
+    ],
+    [t]
+  );
+
+  const handleSave = async () => {
+    const trimmedName = fileName.trim();
+    if (!trimmedName) {
+      setError(t('auth_files.paste_error_file_name'));
+      return;
+    }
+    if (!isValidBaseJsonFileName(trimmedName)) {
+      setError(t('auth_files.paste_error_file_name_invalid'));
+      return;
+    }
+    if (!jsonText.trim()) {
+      setError(t('auth_files.paste_error_json_required'));
+      return;
+    }
+
+    setError('');
+    try {
+      await onSave(type, trimmedName, jsonText);
+      resetForm();
+    } catch (err) {
+      setError(err instanceof Error ? err.message : t('notification.save_failed'));
+    }
+  };
+
+  return (
+    <Modal
+      open={open}
+      onClose={handleClose}
+      title={t('auth_files.paste_title')}
+      width={640}
+      closeDisabled={saving}
+      footer={
+        <>
+          <Button variant="secondary" onClick={handleClose} disabled={saving}>
+            {t('common.cancel')}
+          </Button>
+          <Button onClick={handleSave} loading={saving}>
+            {t('auth_files.paste_save_button')}
+          </Button>
+        </>
+      }
+    >
+      <div className={styles.authJsonPasteModal}>
+        {error && <div className={styles.prefixProxyError}>{error}</div>}
+        <div className={styles.formGroup}>
+          <label>{t('auth_files.paste_type_label')}</label>
+          <Select
+            value={type}
+            options={options}
+            onChange={(value) => setType(value as AuthJsonInputType)}
+            ariaLabel={t('auth_files.paste_type_label')}
+          />
+        </div>
+        <Input
+          label={t('auth_files.paste_file_name_label')}
+          value={fileName}
+          onChange={(event) => setFileName(event.target.value)}
+          disabled={saving}
+          placeholder={DEFAULT_FILE_NAME}
+        />
+        <div className={styles.formGroup}>
+          <label htmlFor="auth-json-paste-content">{t('auth_files.paste_json_label')}</label>
+          <textarea
+            id="auth-json-paste-content"
+            className={styles.authJsonPasteTextarea}
+            value={jsonText}
+            onChange={(event) => setJsonText(event.target.value)}
+            disabled={saving}
+            spellCheck={false}
+            placeholder={t(
+              type === 'session'
+                ? 'auth_files.paste_session_placeholder'
+                : 'auth_files.paste_cpa_placeholder'
+            )}
+          />
+        </div>
+        <p className={styles.authJsonPasteHint}>
+          {t(type === 'session' ? 'auth_files.paste_session_hint' : 'auth_files.paste_cpa_hint')}
+        </p>
+      </div>
+    </Modal>
+  );
+}
diff --git a/src/features/authFiles/sessionAuthConverter.test.ts b/src/features/authFiles/sessionAuthConverter.test.ts
new file mode 100644
index 000000000..a3a78125b
--- /dev/null
+++ b/src/features/authFiles/sessionAuthConverter.test.ts
@@ -0,0 +1,83 @@
+import { describe, expect, it } from 'vitest';
+import {
+  convertAuthJsonInput,
+  getDefaultSessionAuthFileName,
+} from '@/features/authFiles/sessionAuthConverter';
+
+const encodeBase64UrlJson = (value: unknown) =>
+  btoa(JSON.stringify(value)).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+
+const buildJwt = (payload: Record<string, unknown>) =>
+  `${encodeBase64UrlJson({ alg: 'none', typ: 'JWT' })}.${encodeBase64UrlJson(payload)}.`;
+
+describe('convertAuthJsonInput', () => {
+  it('keeps a CPA auth JSON object unchanged', () => {
+    const input = {
+      type: 'codex',
+      email: 'user@example.com',
+      access_token: 'existing-access-token',
+    };
+
+    const result = convertAuthJsonInput(JSON.stringify(input), 'cpa');
+
+    expect(result).toEqual(input);
+  });
+
+  it('converts a ChatGPT session object to CPA Codex auth JSON', () => {
+    const accessToken = buildJwt({
+      exp: 1_800_000_000,
+      email: 'token@example.com',
+      'https://api.openai.com/auth': {
+        chatgpt_account_id: 'acc-from-token',
+        chatgpt_plan_type: 'plus',
+        chatgpt_user_id: 'user-from-token',
+      },
+    });
+
+    const result = convertAuthJsonInput(
+      JSON.stringify({
+        user: { email: 'session@example.com', id: 'session-user' },
+        account: { id: 'session-account', planType: 'pro' },
+        accessToken,
+        sessionToken: 'session-token',
+      }),
+      'session',
+      new Date('2026-05-11T08:00:00.000Z')
+    );
+
+    expect(result).toMatchObject({
+      type: 'codex',
+      account_id: 'session-account',
+      chatgpt_account_id: 'session-account',
+      email: 'session@example.com',
+      name: 'session@example.com',
+      plan_type: 'pro',
+      chatgpt_plan_type: 'pro',
+      access_token: accessToken,
+      session_token: 'session-token',
+      last_refresh: '2026-05-11T08:00:00.000Z',
+      expired: '2027-01-15T08:00:00.000Z',
+    });
+  });
+
+  it('rejects a session object with a non-string access token', () => {
+    expect(() =>
+      convertAuthJsonInput(
+        JSON.stringify({
+          user: { email: 'session@example.com' },
+          accessToken: true,
+        }),
+        'session'
+      )
+    ).toThrow('No ChatGPT session object with accessToken was found');
+  });
+
+  it('builds a safe default file name from converted account identity', () => {
+    const authJson = {
+      type: 'codex',
+      email: 'User.Name+tag@example.com',
+    };
+
+    expect(getDefaultSessionAuthFileName(authJson)).toBe('user-name-tag-example-com.codex.json');
+  });
+});
diff --git a/src/features/authFiles/sessionAuthConverter.ts b/src/features/authFiles/sessionAuthConverter.ts
new file mode 100644
index 000000000..6f29799ae
--- /dev/null
+++ b/src/features/authFiles/sessionAuthConverter.ts
@@ -0,0 +1,345 @@
+export type AuthJsonInputType = 'cpa' | 'session';
+
+type JsonRecord = Record<string, unknown>;
+
+export class AuthJsonConversionError extends Error {
+  constructor(message: string) {
+    super(message);
+    this.name = 'AuthJsonConversionError';
+  }
+}
+
+const isRecord = (value: unknown): value is JsonRecord =>
+  Boolean(value) && typeof value === 'object' && !Array.isArray(value);
+
+const firstNonEmpty = (...values: unknown[]) => {
+  for (const value of values) {
+    if (typeof value === 'string' && value.trim() !== '') return value.trim();
+    if (typeof value === 'number' && Number.isFinite(value)) return value;
+    if (typeof value === 'boolean') return value;
+  }
+  return undefined;
+};
+
+const firstNonEmptyString = (...values: unknown[]) => {
+  for (const value of values) {
+    if (typeof value === 'string' && value.trim() !== '') return value.trim();
+  }
+  return undefined;
+};
+
+const stripUnavailable = (value: unknown): unknown => {
+  if (Array.isArray(value)) {
+    const next = value.map(stripUnavailable).filter((item) => item !== undefined);
+    return next.length ? next : undefined;
+  }
+
+  if (isRecord(value)) {
+    const entries = Object.entries(value)
+      .map(([key, item]) => [key, stripUnavailable(item)] as const)
+      .filter(([, item]) => item !== undefined);
+    return entries.length ? Object.fromEntries(entries) : undefined;
+  }
+
+  if (value === undefined || value === null || value === '') return undefined;
+  return value;
+};
+
+const decodeBase64Url = (value: string) => {
+  const normalized = value.replace(/-/g, '+').replace(/_/g, '/');
+  const padded = normalized.padEnd(Math.ceil(normalized.length / 4) * 4, '=');
+  const binary = atob(padded);
+  const bytes = Uint8Array.from(binary, (char) => char.charCodeAt(0));
+  return new TextDecoder().decode(bytes);
+};
+
+const encodeBase64UrlJson = (value: unknown) => {
+  const bytes = new TextEncoder().encode(JSON.stringify(value));
+  let binary = '';
+  for (let index = 0; index < bytes.length; index += 0x8000) {
+    binary += String.fromCharCode(...bytes.subarray(index, index + 0x8000));
+  }
+  return btoa(binary).replace(/\+/g, '-').replace(/\//g, '_').replace(/=+$/g, '');
+};
+
+const parseJwtPayload = (token: unknown): JsonRecord | undefined => {
+  if (typeof token !== 'string' || token.trim() === '') return undefined;
+  const segments = token.split('.');
+  if (segments.length < 2) return undefined;
+
+  try {
+    const payload = JSON.parse(decodeBase64Url(segments[1])) as unknown;
+    return isRecord(payload) ? payload : undefined;
+  } catch {
+    return undefined;
+  }
+};
+
+const getOpenAIAuthSection = (payload: unknown): JsonRecord => {
+  if (!isRecord(payload)) return {};
+  const auth = payload['https://api.openai.com/auth'];
+  return isRecord(auth) ? auth : {};
+};
+
+const getOpenAIProfileSection = (payload: unknown): JsonRecord => {
+  if (!isRecord(payload)) return {};
+  const profile = payload['https://api.openai.com/profile'];
+  return isRecord(profile) ? profile : {};
+};
+
+const normalizeTimestamp = (value: unknown) => {
+  if (value instanceof Date && !Number.isNaN(value.getTime())) return value.toISOString();
+
+  if (typeof value === 'number' && Number.isFinite(value)) {
+    const milliseconds = value > 1e11 ? value : value * 1000;
+    const date = new Date(milliseconds);
+    return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+  }
+
+  if (typeof value !== 'string' || value.trim() === '') return undefined;
+  const date = new Date(value);
+  return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+};
+
+const timestampFromUnixSeconds = (value: unknown) => {
+  const numeric = Number(value);
+  if (!Number.isFinite(numeric)) return undefined;
+  const date = new Date(numeric * 1000);
+  return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+};
+
+const epochSecondsFromValue = (value: unknown) => {
+  if (value === undefined || value === null || value === '') return 0;
+  const numeric = Number(value);
+  if (Number.isFinite(numeric)) return Math.trunc(numeric > 1e11 ? numeric / 1000 : numeric);
+  const parsed = Date.parse(String(value));
+  return Number.isFinite(parsed) ? Math.trunc(parsed / 1000) : 0;
+};
+
+const buildSyntheticCodexIdToken = (
+  email: unknown,
+  accountId: unknown,
+  planType: unknown,
+  userId: unknown,
+  expiresAt: unknown
+) => {
+  if (!accountId) return undefined;
+
+  const now = Math.trunc(Date.now() / 1000);
+  const authInfo: JsonRecord = { chatgpt_account_id: accountId };
+  const expires = epochSecondsFromValue(expiresAt) || now + 90 * 24 * 60 * 60;
+
+  if (planType) authInfo.chatgpt_plan_type = planType;
+  if (userId) {
+    authInfo.chatgpt_user_id = userId;
+    authInfo.user_id = userId;
+  }
+
+  const payload: JsonRecord = {
+    iat: now,
+    exp: expires,
+    'https://api.openai.com/auth': authInfo,
+  };
+  if (email) payload.email = email;
+
+  return `${encodeBase64UrlJson({ alg: 'none', typ: 'JWT', cpa_synthetic: true })}.${encodeBase64UrlJson(payload)}.`;
+};
+
+const parseJsonObject = (text: string): JsonRecord => {
+  let parsed: unknown;
+  try {
+    parsed = JSON.parse(text);
+  } catch (error) {
+    throw new AuthJsonConversionError(error instanceof Error ? error.message : 'Invalid JSON');
+  }
+
+  if (!isRecord(parsed)) {
+    throw new AuthJsonConversionError('JSON content must be an object');
+  }
+
+  return parsed;
+};
+
+type SessionCandidate = {
+  value: JsonRecord;
+  path: string;
+};
+
+const collectSessionLikeObjects = (value: unknown) => {
+  const found: SessionCandidate[] = [];
+  const visited = new WeakSet<object>();
+
+  const visit = (item: unknown, path: string) => {
+    if (Array.isArray(item)) {
+      item.forEach((child, index) => visit(child, `${path}[${index}]`));
+      return;
+    }
+
+    if (!isRecord(item)) return;
+    if (visited.has(item)) return;
+    visited.add(item);
+
+    const token = firstNonEmptyString(
+      item.accessToken,
+      item.access_token,
+      isRecord(item.token) ? item.token.accessToken : undefined,
+      isRecord(item.credentials) ? item.credentials.access_token : undefined
+    );
+    const hasUser = isRecord(item.user) || firstNonEmpty(item.email, item.name);
+    if (token && hasUser) {
+      found.push({ value: item, path });
+      return;
+    }
+
+    Object.entries(item).forEach(([key, child]) => {
+      if (key === 'accessToken' || key === 'access_token' || key === 'sessionToken') return;
+      visit(child, `${path}.${key}`);
+    });
+  };
+
+  visit(value, '$');
+  return found;
+};
+
+const convertSessionToCpaAuthJson = (record: JsonRecord, now: Date): JsonRecord => {
+  const token = isRecord(record.token) ? record.token : undefined;
+  const credentials = isRecord(record.credentials) ? record.credentials : undefined;
+  const user = isRecord(record.user) ? record.user : undefined;
+  const account = isRecord(record.account) ? record.account : undefined;
+
+  const accessToken = firstNonEmptyString(
+    record.accessToken,
+    record.access_token,
+    token?.accessToken,
+    credentials?.access_token
+  );
+  if (!accessToken) throw new AuthJsonConversionError('Missing accessToken');
+
+  const sessionToken = firstNonEmpty(
+    record.sessionToken,
+    record.session_token,
+    token?.sessionToken,
+    token?.session_token,
+    credentials?.session_token
+  );
+  const refreshToken = firstNonEmpty(
+    record.refreshToken,
+    record.refresh_token,
+    token?.refreshToken,
+    token?.refresh_token,
+    credentials?.refresh_token
+  );
+  const inputIdToken = firstNonEmpty(
+    record.idToken,
+    record.id_token,
+    token?.idToken,
+    token?.id_token,
+    credentials?.id_token
+  );
+
+  const payload = parseJwtPayload(accessToken);
+  const idPayload = parseJwtPayload(inputIdToken);
+  const auth = getOpenAIAuthSection(payload);
+  const idAuth = getOpenAIAuthSection(idPayload);
+  const profile = getOpenAIProfileSection(payload);
+  const expiresAt = firstNonEmpty(
+    payload ? timestampFromUnixSeconds(payload.exp) : undefined,
+    normalizeTimestamp(record.expires),
+    normalizeTimestamp(record.expired),
+    normalizeTimestamp(record.expires_at)
+  );
+  const email = firstNonEmpty(
+    user?.email,
+    record.email,
+    credentials?.email,
+    profile.email,
+    idPayload?.email,
+    payload?.email
+  );
+  const accountId = firstNonEmpty(
+    account?.id,
+    record.account_id,
+    credentials?.chatgpt_account_id,
+    auth.chatgpt_account_id,
+    idAuth.chatgpt_account_id
+  );
+  const userId = firstNonEmpty(
+    user?.id,
+    record.user_id,
+    auth.chatgpt_user_id,
+    auth.user_id,
+    idAuth.chatgpt_user_id,
+    idAuth.user_id
+  );
+  const planType = firstNonEmpty(
+    account?.planType,
+    account?.plan_type,
+    record.plan_type,
+    credentials?.plan_type,
+    auth.chatgpt_plan_type,
+    idAuth.chatgpt_plan_type
+  );
+  const syntheticIdToken = !inputIdToken
+    ? buildSyntheticCodexIdToken(email, accountId, planType, userId, expiresAt)
+    : undefined;
+  const idToken = firstNonEmpty(inputIdToken, syntheticIdToken);
+  const name = firstNonEmpty(email, record.name, 'ChatGPT Account');
+
+  return stripUnavailable({
+    type: 'codex',
+    account_id: accountId,
+    chatgpt_account_id: accountId,
+    email,
+    name,
+    plan_type: planType,
+    chatgpt_plan_type: planType,
+    id_token: idToken,
+    id_token_synthetic: Boolean(syntheticIdToken) || undefined,
+    access_token: accessToken,
+    refresh_token: refreshToken,
+    session_token: sessionToken,
+    last_refresh: normalizeTimestamp(now),
+    expired: expiresAt,
+    disabled: Boolean(record.disabled) || undefined,
+  }) as JsonRecord;
+};
+
+export const convertAuthJsonInput = (
+  text: string,
+  type: AuthJsonInputType,
+  now = new Date()
+): JsonRecord => {
+  const parsed = parseJsonObject(text);
+  if (type === 'cpa') return parsed;
+
+  const sessions = collectSessionLikeObjects(parsed);
+  if (sessions.length === 0) {
+    throw new AuthJsonConversionError('No ChatGPT session object with accessToken was found');
+  }
+  if (sessions.length > 1) {
+    throw new AuthJsonConversionError(
+      'Multiple ChatGPT session objects found; paste one session only'
+    );
+  }
+
+  return convertSessionToCpaAuthJson(sessions[0].value, now);
+};
+
+export const getDefaultSessionAuthFileName = (authJson: JsonRecord) => {
+  const rawName = firstNonEmpty(
+    authJson.email,
+    authJson.name,
+    authJson.account_id,
+    'codex-account'
+  );
+  const safeName = String(rawName)
+    .replace(/\.json$/iu, '')
+    .replace(/[\\/:*?"<>|]+/g, '-')
+    .replace(/[^a-z0-9]+/gi, '-')
+    .replace(/-+/g, '-')
+    .replace(/^-+|-+$/g, '')
+    .toLowerCase()
+    .slice(0, 80);
+
+  return `${safeName || 'codex-account'}.codex.json`;
+};
diff --git a/src/i18n/locales/en.json b/src/i18n/locales/en.json
index 4df1fc44d..1191f9e01 100644
--- a/src/i18n/locales/en.json
+++ b/src/i18n/locales/en.json
@@ -472,6 +472,23 @@
     "title_section": "Auth Files",
     "description": "Manage all CLI Proxy JSON auth files here (e.g. Qwen, Gemini, Vertex). Uploading a credential immediately enables the corresponding AI integration.",
     "upload_button": "Upload File",
+    "paste_button": "Paste JSON",
+    "paste_title": "Paste Auth JSON",
+    "paste_type_label": "Auth JSON type",
+    "paste_type_cpa": "CPA auth JSON",
+    "paste_type_session": "Session auth JSON",
+    "paste_file_name_label": "File name",
+    "paste_json_label": "JSON content",
+    "paste_save_button": "Save Auth File",
+    "paste_cpa_placeholder": "{\n  \"type\": \"codex\",\n  \"access_token\": \"...\"\n}",
+    "paste_session_placeholder": "{\n  \"user\": { \"email\": \"...\" },\n  \"account\": { \"id\": \"...\" },\n  \"accessToken\": \"...\",\n  \"sessionToken\": \"...\"\n}",
+    "paste_cpa_hint": "The JSON will be stored as-is after validating it is a JSON object.",
+    "paste_session_hint": "ChatGPT Web session JSON is converted to a CPA Codex auth file before upload. Tokens are sensitive credentials.",
+    "paste_error_file_name": "File name is required",
+    "paste_error_file_extension": "File name must end with .json",
+    "paste_error_file_name_invalid": "Use a .json file name without path separators or reserved characters",
+    "paste_error_json_required": "JSON content is required",
+    "paste_success": "Saved auth file {{name}}",
     "delete_all_button": "Delete All",
     "empty_title": "No Auth Files",
     "empty_desc": "Click the button above to upload the first file",
diff --git a/src/i18n/locales/ru.json b/src/i18n/locales/ru.json
index 45b374abc..6e56eb4fd 100644
--- a/src/i18n/locales/ru.json
+++ b/src/i18n/locales/ru.json
@@ -466,6 +466,23 @@
     "title_section": "Файлы авторизации",
     "description": "Управляйте всеми JSON-файлами авторизации CLI Proxy (например, Qwen, Gemini, Vertex). Загрузка учётных данных сразу включает соответствующую интеграцию AI.",
     "upload_button": "Загрузить файл",
+    "paste_button": "Вставить JSON",
+    "paste_title": "Вставить JSON авторизации",
+    "paste_type_label": "Тип JSON авторизации",
+    "paste_type_cpa": "CPA auth JSON",
+    "paste_type_session": "Session auth JSON",
+    "paste_file_name_label": "Имя файла",
+    "paste_json_label": "Содержимое JSON",
+    "paste_save_button": "Сохранить файл авторизации",
+    "paste_cpa_placeholder": "{\n  \"type\": \"codex\",\n  \"access_token\": \"...\"\n}",
+    "paste_session_placeholder": "{\n  \"user\": { \"email\": \"...\" },\n  \"account\": { \"id\": \"...\" },\n  \"accessToken\": \"...\",\n  \"sessionToken\": \"...\"\n}",
+    "paste_cpa_hint": "JSON будет сохранён как есть после проверки, что это объект JSON.",
+    "paste_session_hint": "ChatGPT Web session JSON преобразуется в файл CPA Codex auth перед загрузкой. Токены являются чувствительными учётными данными.",
+    "paste_error_file_name": "Имя файла обязательно",
+    "paste_error_file_extension": "Имя файла должно заканчиваться на .json",
+    "paste_error_file_name_invalid": "Укажите имя файла .json без разделителей пути и служебных символов",
+    "paste_error_json_required": "Содержимое JSON обязательно",
+    "paste_success": "Файл авторизации {{name}} сохранён",
     "delete_all_button": "Удалить всё",
     "empty_title": "Файлы авторизации отсутствуют",
     "empty_desc": "Нажмите кнопку выше, чтобы загрузить первый файл",
diff --git a/src/i18n/locales/zh-CN.json b/src/i18n/locales/zh-CN.json
index aec3b0d09..bc60bf5ed 100644
--- a/src/i18n/locales/zh-CN.json
+++ b/src/i18n/locales/zh-CN.json
@@ -472,6 +472,23 @@
     "title_section": "认证文件",
     "description": "这里集中管理 CLI Proxy 支持的所有 JSON 认证文件（如 Qwen、Gemini、Vertex 等），上传后即可在运行时启用相应的 AI 服务。",
     "upload_button": "上传文件",
+    "paste_button": "粘贴 JSON",
+    "paste_title": "粘贴认证 JSON",
+    "paste_type_label": "认证 JSON 类型",
+    "paste_type_cpa": "CPA 认证 JSON",
+    "paste_type_session": "Session 认证 JSON",
+    "paste_file_name_label": "文件名",
+    "paste_json_label": "JSON 内容",
+    "paste_save_button": "保存认证文件",
+    "paste_cpa_placeholder": "{\n  \"type\": \"codex\",\n  \"access_token\": \"...\"\n}",
+    "paste_session_placeholder": "{\n  \"user\": { \"email\": \"...\" },\n  \"account\": { \"id\": \"...\" },\n  \"accessToken\": \"...\",\n  \"sessionToken\": \"...\"\n}",
+    "paste_cpa_hint": "验证为 JSON 对象后会原样保存。",
+    "paste_session_hint": "ChatGPT Web session JSON 会先转换为 CPA Codex 认证文件再上传。Token 属于敏感登录凭证。",
+    "paste_error_file_name": "文件名不能为空",
+    "paste_error_file_extension": "文件名必须以 .json 结尾",
+    "paste_error_file_name_invalid": "请使用不包含路径分隔符或保留字符的 .json 文件名",
+    "paste_error_json_required": "JSON 内容不能为空",
+    "paste_success": "已保存认证文件 {{name}}",
     "delete_all_button": "删除全部",
     "empty_title": "暂无认证文件",
     "empty_desc": "点击上方按钮上传第一个文件",
diff --git a/src/i18n/locales/zh-TW.json b/src/i18n/locales/zh-TW.json
index 305f10288..839bc4a34 100644
--- a/src/i18n/locales/zh-TW.json
+++ b/src/i18n/locales/zh-TW.json
@@ -466,6 +466,23 @@
     "title_section": "驗證檔案",
     "description": "這裡集中管理 CLI Proxy 支援的所有 JSON 驗證檔案（如 Qwen、Gemini、Vertex 等），上傳後即可在執行時啟用對應的 AI 服務。",
     "upload_button": "上傳檔案",
+    "paste_button": "貼上 JSON",
+    "paste_title": "貼上驗證 JSON",
+    "paste_type_label": "驗證 JSON 類型",
+    "paste_type_cpa": "CPA 驗證 JSON",
+    "paste_type_session": "Session 驗證 JSON",
+    "paste_file_name_label": "檔案名稱",
+    "paste_json_label": "JSON 內容",
+    "paste_save_button": "儲存驗證檔案",
+    "paste_cpa_placeholder": "{\n  \"type\": \"codex\",\n  \"access_token\": \"...\"\n}",
+    "paste_session_placeholder": "{\n  \"user\": { \"email\": \"...\" },\n  \"account\": { \"id\": \"...\" },\n  \"accessToken\": \"...\",\n  \"sessionToken\": \"...\"\n}",
+    "paste_cpa_hint": "驗證為 JSON 物件後會原樣儲存。",
+    "paste_session_hint": "ChatGPT Web session JSON 會先轉換為 CPA Codex 驗證檔案再上傳。Token 屬於敏感登入憑證。",
+    "paste_error_file_name": "檔案名稱不可為空",
+    "paste_error_file_extension": "檔案名稱必須以 .json 結尾",
+    "paste_error_file_name_invalid": "請使用不含路徑分隔符或保留字元的 .json 檔案名稱",
+    "paste_error_json_required": "JSON 內容不可為空",
+    "paste_success": "已儲存驗證檔案 {{name}}",
     "delete_all_button": "刪除全部",
     "empty_title": "暫無驗證檔案",
     "empty_desc": "點擊上方按鈕上傳第一個檔案",
diff --git a/src/pages/AuthFilesPage.module.scss b/src/pages/AuthFilesPage.module.scss
index 89656a141..b040de43e 100644
--- a/src/pages/AuthFilesPage.module.scss
+++ b/src/pages/AuthFilesPage.module.scss
@@ -140,7 +140,6 @@
   }
 }
 
-
 .filterAllIconWrap {
   position: relative;
   border-color: var(--color-primary-light-7);
@@ -155,7 +154,6 @@
   color: var(--primary-color);
 }
 
-
 .filterContent {
   display: flex;
   flex-direction: column;
@@ -1452,6 +1450,43 @@
   box-shadow: 0 0 0 3px rgba($error-color, 0.12);
 }
 
+.authJsonPasteModal {
+  display: flex;
+  flex-direction: column;
+  gap: $spacing-md;
+}
+
+.authJsonPasteTextarea {
+  width: 100%;
+  min-height: 300px;
+  box-sizing: border-box;
+  padding: $spacing-sm $spacing-md;
+  border: 1px solid var(--border-color);
+  border-radius: $radius-md;
+  background-color: var(--bg-secondary);
+  color: var(--text-primary);
+  font-family: monospace;
+  font-size: 12px;
+  line-height: 1.6;
+  resize: vertical;
+
+  &:focus {
+    outline: none;
+    border-color: var(--primary-color);
+  }
+
+  &::placeholder {
+    color: var(--text-tertiary);
+  }
+}
+
+.authJsonPasteHint {
+  margin: 0;
+  color: var(--text-secondary);
+  font-size: 12px;
+  line-height: 1.5;
+}
+
 .cardActions {
   display: flex;
   align-items: center;
diff --git a/src/pages/AuthFilesPage.tsx b/src/pages/AuthFilesPage.tsx
index d245d82d4..67b3fb13d 100644
--- a/src/pages/AuthFilesPage.tsx
+++ b/src/pages/AuthFilesPage.tsx
@@ -45,6 +45,7 @@ import {
   type ResolvedTheme,
 } from '@/features/authFiles/constants';
 import { AuthFileCard } from '@/features/authFiles/components/AuthFileCard';
+import { AuthJsonPasteModal } from '@/features/authFiles/components/AuthJsonPasteModal';
 import { AuthFileModelsModal } from '@/features/authFiles/components/AuthFileModelsModal';
 import { AuthFilesPrefixProxyEditorModal } from '@/features/authFiles/components/AuthFilesPrefixProxyEditorModal';
 import { OAuthExcludedCard } from '@/features/authFiles/components/OAuthExcludedCard';
@@ -62,6 +63,12 @@ import {
   writePersistedAuthFilesCompactMode,
   type AuthFilesSortMode,
 } from '@/features/authFiles/uiState';
+import {
+  convertAuthJsonInput,
+  getDefaultSessionAuthFileName,
+  type AuthJsonInputType,
+} from '@/features/authFiles/sessionAuthConverter';
+import { authFilesApi } from '@/services/api';
 import { useAuthStore, useNotificationStore, useQuotaStore, useThemeStore } from '@/stores';
 import styles from './AuthFilesPage.module.scss';
 
@@ -72,8 +79,7 @@ const BATCH_BAR_HIDDEN_TRANSFORM = 'translateX(-50%) translateY(56px)';
 const DEFAULT_REGULAR_PAGE_SIZE = 9;
 const DEFAULT_COMPACT_PAGE_SIZE = 12;
 
-const escapeWildcardSearchSegment = (value: string) =>
-  value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
+const escapeWildcardSearchSegment = (value: string) => value.replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
 
 const buildWildcardSearch = (value: string): RegExp | null => {
   if (!value.includes('*')) return null;
@@ -94,10 +100,7 @@ const stringifySearchValue = (value: unknown): string[] => {
   return [];
 };
 
-const getCodexPlanLabel = (
-  planType: string | null | undefined,
-  t: TFunction
-): string | null => {
+const getCodexPlanLabel = (planType: string | null | undefined, t: TFunction): string | null => {
   const normalized = normalizePlanType(planType);
   if (!normalized) return null;
   if (normalized === 'pro') return t('codex_quota.plan_pro');
@@ -110,15 +113,10 @@ const getCodexPlanLabel = (
   return planType || normalized;
 };
 
-const getAuthFilePlanType = (
-  file: AuthFileItem,
-  quota?: CodexQuotaState
-): string | null => resolveCodexPlanType(file) ?? quota?.planType ?? null;
+const getAuthFilePlanType = (file: AuthFileItem, quota?: CodexQuotaState): string | null =>
+  resolveCodexPlanType(file) ?? quota?.planType ?? null;
 
-const getAuthFilePlanSortRank = (
-  file: AuthFileItem,
-  quota?: CodexQuotaState
-): number | null => {
+const getAuthFilePlanSortRank = (file: AuthFileItem, quota?: CodexQuotaState): number | null => {
   const normalized = normalizePlanType(getAuthFilePlanType(file, quota));
   if (!normalized) return null;
   if (normalized === 'pro') return 50;
@@ -129,11 +127,7 @@ const getAuthFilePlanSortRank = (
   return 0;
 };
 
-const getAuthFileSearchValues = (
-  file: AuthFileItem,
-  t: TFunction,
-  quota?: CodexQuotaState
-) => {
+const getAuthFileSearchValues = (file: AuthFileItem, t: TFunction, quota?: CodexQuotaState) => {
   const planType = getAuthFilePlanType(file, quota);
   const planLabel = getCodexPlanLabel(planType, t);
   const accountId = resolveCodexChatgptAccountId(file);
@@ -187,6 +181,8 @@ export function AuthFilesPage() {
   const [sortMode, setSortMode] = useState<AuthFilesSortMode>('default');
   const [batchActionBarVisible, setBatchActionBarVisible] = useState(false);
   const [uiStateHydrated, setUiStateHydrated] = useState(false);
+  const [authJsonPasteOpen, setAuthJsonPasteOpen] = useState(false);
+  const [authJsonPasteSaving, setAuthJsonPasteSaving] = useState(false);
   const floatingBatchActionsRef = useRef<HTMLDivElement>(null);
   const batchActionAnimationRef = useRef<AnimationPlaybackControlsWithThen | null>(null);
   const previousSelectionCountRef = useRef(0);
@@ -289,10 +285,7 @@ export function AuthFilesPage() {
       if (typeof persisted.disabledOnly === 'boolean') {
         setDisabledOnly(persisted.disabledOnly);
       }
-      if (
-        typeof persistedCompactMode !== 'boolean' &&
-        typeof persisted.compactMode === 'boolean'
-      ) {
+      if (typeof persistedCompactMode !== 'boolean' && typeof persisted.compactMode === 'boolean') {
         setCompactMode(persisted.compactMode);
       }
       if (typeof persisted.search === 'string') {
@@ -308,11 +301,11 @@ export function AuthFilesPage() {
       const regularPageSize =
         typeof persisted.regularPageSize === 'number' && Number.isFinite(persisted.regularPageSize)
           ? clampCardPageSize(persisted.regularPageSize)
-          : legacyPageSize ?? DEFAULT_REGULAR_PAGE_SIZE;
+          : (legacyPageSize ?? DEFAULT_REGULAR_PAGE_SIZE);
       const compactPageSize =
         typeof persisted.compactPageSize === 'number' && Number.isFinite(persisted.compactPageSize)
           ? clampCardPageSize(persisted.compactPageSize)
-          : legacyPageSize ?? DEFAULT_COMPACT_PAGE_SIZE;
+          : (legacyPageSize ?? DEFAULT_COMPACT_PAGE_SIZE);
       setPageSizeByMode({
         regular: regularPageSize,
         compact: compactPageSize,
@@ -415,6 +408,28 @@ export function AuthFilesPage() {
     [loadFiles, sortMode]
   );
 
+  const handleSavePastedAuthJson = useCallback(
+    async (type: AuthJsonInputType, fileName: string, jsonText: string) => {
+      setAuthJsonPasteSaving(true);
+      try {
+        const authJson = convertAuthJsonInput(jsonText, type);
+        const resolvedFileName =
+          type === 'session' && fileName === 'codex-account.json'
+            ? getDefaultSessionAuthFileName(authJson)
+            : fileName;
+        await authFilesApi.saveJsonObject(resolvedFileName, authJson);
+        showNotification(t('auth_files.paste_success', { name: resolvedFileName }), 'success');
+        setAuthJsonPasteOpen(false);
+        await loadFiles();
+      } catch (err) {
+        throw new Error(err instanceof Error ? err.message : t('notification.save_failed'));
+      } finally {
+        setAuthJsonPasteSaving(false);
+      }
+    },
+    [loadFiles, showNotification, t]
+  );
+
   const handleHeaderRefresh = useCallback(async () => {
     await Promise.all([loadFiles(), loadExcluded(), loadModelAlias()]);
   }, [loadFiles, loadExcluded, loadModelAlias]);
@@ -518,8 +533,7 @@ export function AuthFilesPage() {
         if (leftKnown || rightKnown) {
           if (!leftKnown) return 1;
           if (!rightKnown) return -1;
-          const rankDiff =
-            sortMode === 'plan-desc' ? rightRank - leftRank : leftRank - rightRank;
+          const rankDiff = sortMode === 'plan-desc' ? rightRank - leftRank : leftRank - rightRank;
           if (rankDiff !== 0) return rankDiff;
         }
 
@@ -770,6 +784,15 @@ export function AuthFilesPage() {
             <Button variant="secondary" size="sm" onClick={handleHeaderRefresh} disabled={loading}>
               {t('common.refresh')}
             </Button>
+            <Button
+              variant="secondary"
+              size="sm"
+              onClick={() => setAuthJsonPasteOpen(true)}
+              disabled={disableControls || authJsonPasteSaving}
+              loading={authJsonPasteSaving}
+            >
+              {t('auth_files.paste_button')}
+            </Button>
             <Button
               size="sm"
               onClick={handleUploadClick}
@@ -1022,6 +1045,15 @@ export function AuthFilesPage() {
         onChange={handlePrefixProxyChange}
       />
 
+      <AuthJsonPasteModal
+        open={authJsonPasteOpen}
+        saving={authJsonPasteSaving}
+        onClose={() => {
+          if (!authJsonPasteSaving) setAuthJsonPasteOpen(false);
+        }}
+        onSave={handleSavePastedAuthJson}
+      />
+
       {batchActionBarVisible && typeof document !== 'undefined'
         ? createPortal(
             <div className={styles.batchActionContainer} ref={floatingBatchActionsRef}>
diff --git a/src/services/api/authFiles.ts b/src/services/api/authFiles.ts
index 35ee47027..928c611f6 100644
--- a/src/services/api/authFiles.ts
+++ b/src/services/api/authFiles.ts
@@ -91,12 +91,11 @@ const normalizeBatchFailures = (value: unknown): AuthFileBatchFailure[] => {
   }, []);
 };
 
-const deriveSuccessfulFileNames = (requestedNames: string[], failed: AuthFileBatchFailure[]): string[] => {
-  const failedNames = new Set(
-    failed
-      .map((entry) => entry.name.trim())
-      .filter(Boolean)
-  );
+const deriveSuccessfulFileNames = (
+  requestedNames: string[],
+  failed: AuthFileBatchFailure[]
+): string[] => {
+  const failedNames = new Set(failed.map((entry) => entry.name.trim()).filter(Boolean));
 
   if (failedNames.size === 0) {
     return [...requestedNames];
@@ -133,7 +132,8 @@ const normalizeBatchUploadResponse = (
   }
 
   return {
-    status: typeof payload?.status === 'string' ? payload.status : failed.length > 0 ? 'partial' : 'ok',
+    status:
+      typeof payload?.status === 'string' ? payload.status : failed.length > 0 ? 'partial' : 'ok',
     uploaded,
     files: uploadedFiles,
     failed,
@@ -168,7 +168,8 @@ const normalizeBatchDeleteResponse = (
   }
 
   return {
-    status: typeof payload?.status === 'string' ? payload.status : failed.length > 0 ? 'partial' : 'ok',
+    status:
+      typeof payload?.status === 'string' ? payload.status : failed.length > 0 ? 'partial' : 'ok',
     deleted,
     files: deletedFiles,
     failed,
@@ -310,7 +311,11 @@ const parseAuthFileJsonObject = (rawText: string): Record<string, unknown> => {
 
 const saveAuthFileText = async (name: string, text: string) => {
   const file = new File([text], name, { type: 'application/json' });
-  await authFilesApi.upload(file);
+  const result = await authFilesApi.upload(file);
+  if (result.failed.length > 0 || result.uploaded === 0) {
+    const failure = result.failed[0];
+    throw new Error(failure?.error || 'Upload failed');
+  }
 };
 
 export const isAuthFileInvalidJsonObjectError = (err: unknown): boolean =>
@@ -358,10 +363,7 @@ const normalizeOauthModelAlias = (payload: unknown): Record<string, OAuthModelAl
   if (!payload || typeof payload !== 'object') return {};
 
   const record = payload as Record<string, unknown>;
-  const source =
-    record['oauth-model-alias'] ??
-    record.items ??
-    payload;
+  const source = record['oauth-model-alias'] ?? record.items ?? payload;
   if (!source || typeof source !== 'object') return {};
 
   const result: Record<string, OAuthModelAliasEntry[]> = {};
@@ -373,17 +375,17 @@ const normalizeOauthModelAlias = (payload: unknown): Record<string, OAuthModelAl
     if (!key) return;
     if (!Array.isArray(mappings)) return;
 
-	    const seen = new Set<string>();
-	    const normalized = mappings
-	      .map((item) => {
-	        if (!item || typeof item !== 'object') return null;
-	        const entry = item as Record<string, unknown>;
-	        const name = String(entry.name ?? entry.id ?? entry.model ?? '').trim();
-	        const alias = String(entry.alias ?? '').trim();
-	        if (!name || !alias) return null;
-	        const fork = entry.fork === true;
-	        return fork ? { name, alias, fork } : { name, alias };
-	      })
+    const seen = new Set<string>();
+    const normalized = mappings
+      .map((item) => {
+        if (!item || typeof item !== 'object') return null;
+        const entry = item as Record<string, unknown>;
+        const name = String(entry.name ?? entry.id ?? entry.model ?? '').trim();
+        const alias = String(entry.alias ?? '').trim();
+        if (!name || !alias) return null;
+        const fork = entry.fork === true;
+        return fork ? { name, alias, fork } : { name, alias };
+      })
       .filter(Boolean)
       .filter((entry) => {
         const aliasEntry = entry as OAuthModelAliasEntry;
@@ -468,9 +470,12 @@ export const authFilesApi = {
   deleteAll: () => apiClient.delete('/auth-files', { params: { all: true } }),
 
   downloadText: async (name: string): Promise<string> => {
-    const response = await apiClient.getRaw(`/auth-files/download?name=${encodeURIComponent(name)}`, {
-      responseType: 'blob'
-    });
+    const response = await apiClient.getRaw(
+      `/auth-files/download?name=${encodeURIComponent(name)}`,
+      {
+        responseType: 'blob',
+      }
+    );
     const blob = response.data as Blob;
     return blob.text();
   },
@@ -510,8 +515,12 @@ export const authFilesApi = {
     const normalizedChannel = String(channel ?? '')
       .trim()
       .toLowerCase();
-    const normalizedAliases = normalizeOauthModelAlias({ [normalizedChannel]: aliases })[normalizedChannel] ?? [];
-    await apiClient.patch(OAUTH_MODEL_ALIAS_ENDPOINT, { channel: normalizedChannel, aliases: normalizedAliases });
+    const normalizedAliases =
+      normalizeOauthModelAlias({ [normalizedChannel]: aliases })[normalizedChannel] ?? [];
+    await apiClient.patch(OAUTH_MODEL_ALIAS_ENDPOINT, {
+      channel: normalizedChannel,
+      aliases: normalizedAliases,
+    });
   },
 
   deleteOauthModelAlias: async (channel: string) => {
@@ -520,16 +529,23 @@ export const authFilesApi = {
       .toLowerCase();
 
     try {
-      await apiClient.patch(OAUTH_MODEL_ALIAS_ENDPOINT, { channel: normalizedChannel, aliases: [] });
+      await apiClient.patch(OAUTH_MODEL_ALIAS_ENDPOINT, {
+        channel: normalizedChannel,
+        aliases: [],
+      });
     } catch (err: unknown) {
       const status = getStatusCode(err);
       if (status !== 405) throw err;
-      await apiClient.delete(`${OAUTH_MODEL_ALIAS_ENDPOINT}?channel=${encodeURIComponent(normalizedChannel)}`);
+      await apiClient.delete(
+        `${OAUTH_MODEL_ALIAS_ENDPOINT}?channel=${encodeURIComponent(normalizedChannel)}`
+      );
     }
   },
 
   // 获取认证凭证支持的模型
-  async getModelsForAuthFile(name: string): Promise<{ id: string; display_name?: string; type?: string; owned_by?: string }[]> {
+  async getModelsForAuthFile(
+    name: string
+  ): Promise<{ id: string; display_name?: string; type?: string; owned_by?: string }[]> {
     const data = await apiClient.get<Record<string, unknown>>(
       `/auth-files/models?name=${encodeURIComponent(name)}`
     );
@@ -540,8 +556,12 @@ export const authFilesApi = {
   },
 
   // 获取指定 channel 的模型定义
-  async getModelDefinitions(channel: string): Promise<{ id: string; display_name?: string; type?: string; owned_by?: string }[]> {
-    const normalizedChannel = String(channel ?? '').trim().toLowerCase();
+  async getModelDefinitions(
+    channel: string
+  ): Promise<{ id: string; display_name?: string; type?: string; owned_by?: string }[]> {
+    const normalizedChannel = String(channel ?? '')
+      .trim()
+      .toLowerCase();
     if (!normalizedChannel) return [];
     const data = await apiClient.get<Record<string, unknown>>(
       `/model-definitions/${encodeURIComponent(normalizedChannel)}`
@@ -550,5 +570,5 @@ export const authFilesApi = {
     return Array.isArray(models)
       ? (models as { id: string; display_name?: string; type?: string; owned_by?: string }[])
       : [];
-  }
+  },
 };