A reactive web application using Spring Session uses server.servlet.session.timeout to configure its session timeout

[wilkinsona]

When spring.session.timeout isn't configured, the Spring Session auto-configuration falls back to server.servlet.session.timeout irrespective of the web application's type. It doesn't feel right that we use a servlet-specific session timeout property as a fallback for Spring Session's session timeout in a reactive web application.