Our current application is a rota application that lives in browser and houses a lot of sensitive data, we need a way to set an expiry time on the cookies that keep a session logged in so that should a user walk away from a communal works computer, the next person to sit down is not still logged in as them.

Should a user stop interacting with the website they should be auto logged out after five minutes (with a warning timer beforehand) to ensure client safety.

Is this possible? I’ve seen php fixes but we need it in JS if possible, it’s detrimental to the whole project so any help is more than appreciated.