I did not overwrite the default from Spring, I think it is 30 minutes.
You can either use SSO and control the session in your SSO provider or set the environment variable SERVER_SERVLET_SESSION_TIMEOUT to another value (1h for example)