Hi.
Thanks for replying so quickly!
That's what I thought it would do, but when testing, it does not look like the timeout value is used for the session, but the actual cache object expiration.
I made the custom auth to return this string, "permissions 3 timeout minutes 1", and below is my...