FR: FirebaseAuth - refresh token custom expiration time

FirebaseAuth is an amazing product, probably the best on the market, and when combined with other Firebase/Google products it saves a lot of dev time. The only limitation which prevents us from using it in more of our projects is the default long lived (1 year) refresh token from firebase auth, this is mostly ok for mobile apps but is unsafe/unusable for web applications where there are minimum security concerns (payments, personal data, etc) to have a user logged in for 1 year.
This could be mitigated if we could define (from Firebase Console) the expiration time for the refresh token , and it would be amazing if we could define it per firebase app , where we would be able to set a custom expiration time for the refresh for each app independently.
I am not familiar with the internals of FirebaseAuth and if this would have any security implications but this feature would make Firebase complete and more secure to use