Force a logged-in user to re-enter their password #111
Description
Is their a first class solution that enables you to force a logged-in user to re-enter their password before being allowed access to a resource if the logged-in user has been inactive for a period of time?
I.e. If I am using Stripe as a developer and I leave the tab open but un-used for a number of hours then before I can perform any ‘important actions’ I am prompted to re-submit my password. I am not actually logged out, I can still access my account and view data, but if I try and perform an important function, i.e. change a config var, then I am prompted to re-submit my password.
I have had a look around the docs but I cant see any obvious mentions of this kind of behaviour?