By default a session has an expiration time set in the conf folder. Laravel renews the session on each request and set a remember variable to renew users who chose remember for login.
This can all be configured for your needs and use different session drivers etc. I believe (can't remember off the top of my head) that sessions are checked via a web middleware.