Does a session token remain active/valid until the session is logged out using the logout service?
Specifically, can I count on the session token to remain active forever unless the logout service is invoked for that session?
Are there any other actions/activities/inactivities/etc that cause the session token to become invalid?
Thanks for all of your help so far!