Proactive notification API returns 401 after widget close

trying to push a message to a user who had a session yesterday. the widget is gone but i have the externalContactId. calling POST /api/v2/webmessaging/guests/{id}/notifications with the same token works fine for active chats but throws a 401 Unauthorized for closed ones.

{
“message”: “hello”,
“type”: “TEXT”
}

is the token expiring faster than i thought or is this endpoint strict about session state?