how long does the rest api session key last? Can you revoke it?

[juniormint]

Rest API Login
A session key is returned...does this thing last forever? If not, under what circumstances does it expire or get revoked? Can I force revoke all sessions for user? or at least a specific session?

[juniormint · Accepted solution]

Seems like it lasts till
1) the server is restarted
2) they are manually invalidated

[starcher]

My understanding is that it is tied to the session timeout under settings->general as would normal web session logins to the search page.