customize session time box by each flow (short lived session for B2B2C apps)

[softmarshmallow]

Hi. Let's say we have a B2B2C app like Stripe.
the workspace (saas) user and customer user shares the same supabase auth.user for rls and following best practices.

Let's also say that we have a "Customer Portal" page like Stripe, that this requires verification of email, but that specific session is valid for 30 min. (for security or whatever reasons)

Currently the session time-box configuration is global, but seems technically possible to add extra args to set this by-auth by-flow individually.

Thoughts and anyone needs this for your apps ?