[abcxjeb284]

This one is based in security standards :( https://security.stackexchange.com/questions/45455/which-sec... (link talks about screen locking but similar vibe for app logout for various certification bodies)

[dkdbejwi383]

At least this is based on "inactivity", compared to "authentication tokens must have a maximum lifespan of 15 minutes"