Hi @shinou,
I'm not sure if you're deploy via .jar
or .war
but according to this Stackoverflow post, session timeout setting may or may not be used and seems to work when Spring Boot uses an embedded Tomcat as the web container. If you're deploy your app as a WAR file, your setting will not be honored unless a web.xml file is created with a configuration.