Force OAuth2 re-authentication after N days?

[Falco]

The cookie having Expires: Session will re-auth on the SSO endpoint every time the browser is closed and reopened*. I think this will sort it.

* Except sneaky chrome