You can configure HTTP Session Timeout for Spring Boot Applications in two ways:
Configuring Session Timeout in application.properties
The simplest option is to include in your application.properties the parameter server.servlet.session.timeout. For example:
server.servlet.session.timeout=60s
Also note that Tomcat will not allow you to set the timeout any less than 60 seconds.
Configuring Session Timeout Programmatically
Let’s say we want that our HttpSession last only two minutes. To make this happen, we can add to our WebConfiguration class an EmbeddedServletContainerCustomizer Bean with the following content: