Confirm Password

There are times you would users of your application to re-enter their passwords before visiting certain pages or carrying out certain actions just to ensure the right user is the one taking said actions.

Pace provides this functionality out of the box. All you have to do is apply the confirmPassword middlware to the routes you want, then Pace will handle the rest. Basically, when users visit a route that needs password to be confirmed, users will be redirected to the "Confirm Password" page where they can enter their page and if the password checks out, users will be redirected to their intended URL. Otherwise, they will be taken back to the "Confirm Password" screen to re-enter their passwords.

By default, the confirm password timeout is set to 3 hours after which users will be prompted to reconfirm their passwords. Of course, you can tweak it to suit your application.