According to the documentation of Spring Boot, session timeout can be configured by setting
server.servlet.session.timeout= 300s
in
Maybe you added remember me. This will make the session always valid.