OWASPASVS 5.0 requirement

ASVS-V7.3.2 There is an absolute maximum session lifetime such that re-authentication is enforced according to risk analysis and documented security…

L2 Published 2025 Official page ↗

Standard: OWASP ASVS 5.0
Chapter: V7 Session Management
Section: V7.3 Session Timeout
Level: L2 (requirement applies from this verification level up)

Requirement

Verify that there is an absolute maximum session lifetime such that re-authentication is enforced according to risk analysis and documented security decisions.