Here's some relevant detail from my config file:
'rememberUsernameDuration' => false, 'rememberedUserSessionDuration' => false, 'userSessionDuration' => 'PT30S'
I'm expecting to see sessions timing out after 30 seconds but they don't seem to be, and if I remove that they are still valid beyond the default time.
Now, one thing I'm doing is setting a session directly in a plugin:
Am I missing something here? The config file definitely affects the Craft CMS login session as with the config above I get constant warnings to keep my session open in the CMS.