Function default_session_ttl 

pub const fn default_session_ttl() -> Duration

How long stored viewer state outlives its last use.

It matches the session cookie’s own lifetime: state keyed to an identity that can no longer authenticate has nothing left to belong to.