How do I test session timeout?
First, testers have to check whether a timeout exists, for instance, by logging in and waiting for the timeout log out to be triggered. As in the log out function, after the timeout has passed, all session tokens should be destroyed or be unusable.
How do I set HTTP session timeout?
To set the HTTP Session time-out at the server level, navigate to Servers > Application Servers > Your Server > Web Container > Session Management. In the Session time-out section of this window, you can select No time-out or Set time-out by clicking the appropriate radio button.