Seeking Clarity on Login Timeout with Wappler and PHP

My app is PHP based and follows the standard Wappler login procedure using the Security Provider and Security Login server action steps (shown below).

I would appreciate answers to the following questions to be sure I understand how this all works with regard to login timeout…

1. Is it true to say that if there is no activity by my app user after the time set by the session.cookie_lifetime variable in my php.ini file, then the login credentials will no longer be valid and further calls to server actions protected by the Security Restrict action step will fail?

2. If the above is true, what type of action needs to no longer be taking place to define “no activity by my app user”?

Thanks!
Antony.

sp847×233 5.22 KB