Expire Idle WordPress Sessions (JavaScript)

expire_idle_wp.html

<script type="text/javascript">
	var logoutUrl = '<?php echo htmlspecialchars_decode( wp_logout_url() ); ?>';
	var timeout;

	document.onload = resetTimeout;
	document.onmousemove = resetTimeout;
	document.onkeypress = resetTimeout;

	function resetTimeout() {
		clearTimeout( timeout );
		timeout = setTimeout( function () {
			window.location.href = logoutUrl;
		}, 600000 ); // 10 minutes
	}
</script>

// Note: This cannot be considered a secure method because the client can always see and manipulate the code in the DOM.