Hi Sergiy,
I have found the answers in the link as below: thanks!
Tokens issued by a server have a 120 minutes lifetime after the last activity. Last activity in this case means any REST service (even those that don’t contain an X-Appery-Session-Token) that triggers a database for any kind of operation – read, update, delete, etc. This also includes any REST service that triggers server code scripts secured by the database. Once the token has expired, the user should log in again to obtain a new sessionToken. Currently, there is no way to change the sessionToken lifetime, though that option may exist in the future.