How long does a PAT authenticated session last if you've disabled the invalidate sessions default?

[Jamie Gaard]

We'd like to enforce our users and their Jira bots to make use of PATs, detailed here: https://confluence.atlassian.com/enterprise/using-personal-access-tokens-1026032365.html

Some of these users hit the API multiple times per min. Since PAT sessions are immediately terminated after successful authentication (by default) we end up with a bunch of authentication messages in our logs. Very annoying to parse. 

Luckily you can disable the default setting to invalidate PAT sessions, via a system flag. There's isnt any setting for how long should session last though. I would assume it defaults to Tomcat-Jira session length (and then the global Tomcat session length as a fallback to that), but this isn't mentioned anywhere. Does any one know? Thanks