Should you extend session expiration in all API endpoints?

[musjj]

Should you always extend the session lifetime in all API endpoints (that requires session authentication) or should you only do it in specific endpoints e.g. /api/auth/session?

I'm using GraphQL where your API is divided into queries and mutations and you're only supposed to mutate the database in mutations. But this means that queries that needs authentication can potentially mutate the database, so I'm not sure if this is a good approach.