Expired sessions may require a fresh wallet-based sign-in. Verify the domain and read the new signing request before approving it. Exact timeout behavior will be documented after production testing.