invoiceninja/app/Http/Middleware/SessionDataCheckMiddleware.php

<?php namespace App\Http\Middleware;

use Closure;
use Auth;
use Session;

// https://arjunphp.com/laravel5-inactivity-idle-session-logout/
class SessionDataCheckMiddleware {

    /**
     * Check session data, if role is not valid logout the request
     *
     * @param  \Illuminate\Http\Request  $request
     * @param  \Closure  $next
     * @return mixed
     */
    public function handle($request, Closure $next) {

        $bag = Session::getMetadataBag();

        $max = config('session.lifetime') * 60; // minute to second conversion

        if (($bag && $max < (time() - $bag->getLastUsed()))) {

            $request->session()->flush(); // remove all the session data

            Auth::logout(); // logout user

        }

        return $next($request);
    }
}