How to force session out TOMCAT server after 5 hours(not in inactivity) tomcat version using : 8.5.46
similar as How to configure a maximum duration of an application session in Tomcat?
You can add a filter and check session create time upon each request, and invalidate it if it's over 5 hours.