Reautenticació

Reautenticació refers to the process of verifying a user's identity again after an initial authentication has already taken place. This is often implemented to enhance security, particularly for sensitive operations or after a period of inactivity. Unlike a single login, reauthentication requires the user to provide credentials, such as a password, a one-time code, or biometric data, a second time.

The necessity for reauthentication typically arises when a system needs to confirm that the user is still the legitimate owner of the account before proceeding with an action that carries a higher risk. Examples include accessing financial information, changing account settings, or making a significant purchase. This measure helps to mitigate risks associated with session hijacking or unauthorized access if a user's initial session has been compromised.

Different methods can be employed for reauthentication, often mirroring the initial authentication process but sometimes with an added layer of security. This might involve multi-factor authentication (MFA), where multiple forms of verification are required. The frequency of reauthentication prompts can be configured by administrators or based on user activity, aiming to strike a balance between security and user convenience.