Session Timeout Testing Checklist

Test idle behavior

Leave the app idle and confirm what happens when the timeout threshold is reached. Users should not be able to continue sensitive actions after a session expires.

Test active behavior

Some systems extend sessions while users are active. Confirm whether active use resets the timer and whether background tabs behave differently.

Test recovery

After timeout, the app should guide the user back to login or re-authentication without losing more work than necessary.

Check multiple tabs

Logout and timeout behavior can be inconsistent across tabs. Test one tab logging out, another tab making a request, and a refresh after expiration.