title: Tomcat Spring Security - set session cookie expiration time
body: <p>I'm building a web application based on an embeded Tomcat - 7.0.55, Spring-Boot-1.1.6, Spring-webmvc/core - 4.0.7 and Spring-Security - 3.2.5.</p>
  
  <p>My configuration looks like this:</p>
  
  <pre><code>@Configuration
  public class ServletCtxConfig {
  
      @Bean
      @Profile({ Profiles.PRODUCTION, Profiles.QA, Profiles.DEV })
      EmbeddedServletContainerFactory servletContainerFactory() {
          TomcatEmbeddedServletContainerFactory retVal = new TomcatEmbeddedServletContainerFactory();
          retVal.setContextPath("contextPath");
          retVal.setTomcatContextCustomizers(Arrays.asList(contextCustomizer()));
          retVal.setPort(111);
          Connector httpConnector = new Connector("org.apache.coyote.http11.Http11NioProtocol");
          httpConnector.setPort(123);
          httpConnector.setRedirectPort(456);
          retVal.addAdditionalTomcatConnectors(httpConnector);
  
          return retVal;
      }
  
      @Bean
      CustomCustomizer contextCustomizer() {
          return new CustomCustomizer();
      }
  
  }
  
  class CustomCustomizer implements TomcatContextCustomizer {
  
      @Value("${session.timeout:10080}")
      Integer sessionTimeOut;
  
      @Override
      public void customize(Context context) {
          context.setSessionCookieName("comilion-fw");
          context.setSessionTimeout(sessionTimeOut);
          context.setUseHttpOnly(false);
      }
  }
  </code></pre>
  
  <p>I am able to set the session expiration time but it is not reflected on the cookie expiration time on the browser.
  Can some one please instruct me how to set the cookie expiration time?</p>