在java spring boot / spring security (HttpSecurity)中如何在会话到期时自动注销

server:
  servlet:
    session:
      timeout: 1800 # 设置会话超时时间，单位为秒

@Configuration
@EnableWebSecurity
public class SecurityConfig extends WebSecurityConfigurerAdapter {

    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http
            .sessionManagement()
                .invalidSessionUrl("/logout") // 会话过期后跳转的URL
                .and()
            .logout()
                .logoutUrl("/logout") // 注销URL
                .logoutSuccessUrl("/login") // 注销成功后跳转的URL
                .invalidateHttpSession(true) // 注销时使HttpSession失效
                .deleteCookies("JSESSIONID"); // 注销时删除指定的Cookie
    }
}